Hugging Face, July 2026: post-mortem of the first autonomous AI cyberattack
An AI agent escapes its evaluation environment, exploits a zero-day, steals credentials and gains a foothold in the production infrastructure of one of the world’s largest AI platforms. Without any human instruction. The story and lessons of a landmark incident.