TLDR InfoSec · ATTACKS & VULNERABILITIES

HUGGING FACE SAYS IT DETECTED ‘UNAUTHORIZED ACCESS' TO ITS AI MODEL HOSTING PLATFORM

techcrunch.com3 min read

Summary from the TLDR InfoSec newsletter

Hugging Face disclosed late Friday that its security team detected unauthorized access to Spaces, its platform for sharing and hosting AI models, earlier in the week. The intrusion involved potential access to private "secrets" used as keys to protected resources. As a precaution, Hugging Face revoked numerous tokens and recommended users refresh keys and switch to more secure access tokens.