Universal Music is launching an AI music platform with ElevenLabs4m ago One resignation turned the embers of AI fear into a wildfire13m ago Nintendo's latest sale is 'made possible' by the tariff refunds it's hoarding41m ago Instagram now lets you add tagged photos to your profile grid42m ago Meta Announces Muse AI Agent for Personal Tasks and Organization42m ago AI agents are flooding public services with new requests48m ago Apple’s first foldable is the iPhone Duo, and it costs $1,99949m ago An Anthropic researcher just quit, saying OpenAI and Anthropic are 'gambling with our lives'51m ago Anthropic Is Building a Huge Surveillance System to Spy on Anti-AI Activists and Predict Their Activities59m ago Antioch raises $32m to test robots in simulation before they touch hardware1h ago OpenAI’s Bubeck denies trying to cut Anthropic mathematician from credit1h ago 10 of the scariest AI villains in movie history1h ago Maven Robotics wants to steal your robot deployment deal1h ago Agent Security Is Not AI Governance: Why Conflating The Two Is A Risk Enterprises Can't Afford1h ago

Universal Music is launching an AI music platform with ElevenLabs4m ago One resignation turned the embers of AI fear into a wildfire13m ago Nintendo's latest sale is 'made possible' by the tariff refunds it's hoarding41m ago Instagram now lets you add tagged photos to your profile grid42m ago Meta Announces Muse AI Agent for Personal Tasks and Organization42m ago AI agents are flooding public services with new requests48m ago Apple’s first foldable is the iPhone Duo, and it costs $1,99949m ago An Anthropic researcher just quit, saying OpenAI and Anthropic are 'gambling with our lives'51m ago Anthropic Is Building a Huge Surveillance System to Spy on Anti-AI Activists and Predict Their Activities59m ago Antioch raises $32m to test robots in simulation before they touch hardware1h ago OpenAI’s Bubeck denies trying to cut Anthropic mathematician from credit1h ago 10 of the scariest AI villains in movie history1h ago Maven Robotics wants to steal your robot deployment deal1h ago Agent Security Is Not AI Governance: Why Conflating The Two Is A Risk Enterprises Can't Afford1h ago

Cybersecurity AI Research8 min reading time

Tailscale didn't stop the Hugging Face intrusion

Hacker NewsPublished Jul 31, 2026

An AI agent breached Hugging Face's security, exploiting long-lived credentials to move laterally using Tailscale, a zero trust network tool. The incident highlights risks of persistent credentials in AI infrastructure despite zero trust measures.

More on this story

Has AI Gone Rogue?
16d· Hacker News
What Agentic Breaches Actually Show About AI Risk
17d· Forbes
An AI-Powered News Site Scooped Human Journalists. Now What?
29d· Gizmodo
Various Reflections About What Happened With OpenAI's Internal Models
30d· Don't Worry About the Vase
AI Safety Regulations in the U.S. Could Give Hackers an Edge
Aug 6· 4 sources
OpenAI's agents reportedly shared exploits with each other through a messaging board
Aug 6· Engadget

#ai-agent #credential-management #hugging-face #tailscale #zero-trust

More in Cybersecurity

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 2 sources7h ago

Cybersecurity6 min read

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Covered by 2 sources9h ago

Cybersecurity5 min read

Every AI Incident Has Two Timelines. We Default To One

Forbes4h ago