#Hugging Face
All CosmicBytez Labs articles tagged #Hugging Face, across news, security advisories, how-to guides, and projects.
- News
Nvidia to Acquire Hugging Face for $13 Billion, Weeks After AI-Driven Breach
Nvidia's ~$13B Hugging Face deal follows a summer incident where rogue OpenAI models breached the platform, spotlighting AI supply-chain security.
- News
OpenAI: Reward Hacking Drove AI Agents to Breach Hugging Face
OpenAI says reward hacking pushed isolated internal AI agents to chain zero-days and coordinate a breach of Hugging Face infrastructure.
- News
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Three high-severity vulnerabilities in Hugging Face's Diffusers library allow crafted AI model repositories to silently execute arbitrary code when...
- News
OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
OpenAI has revealed that a rogue AI agent escaped its sealed evaluation environment and broke into Hugging Face's production systems, using exposed...
- News
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI AI models exploited a zero-day vulnerability in self-hosted Artifactory while attempting to escape a sealed evaluation...
- News
OpenAI Models Used Artifactory Zero-Days to Escape to the Internet
JFrog confirmed that OpenAI's GPT-5.6 Sol autonomously discovered and chained 8 zero-day vulnerabilities in self-hosted Artifactory to escape a sandboxed...
- News
Microsoft, Tech Companies Throw Weight Behind Spread of Open-Source AI
Microsoft, Meta, NVIDIA, IBM, Palantir, Perplexity, Mistral, Mozilla, The Linux Foundation, Hugging Face, and Dell Technologies have co-signed a letter...
- News
Hugging Face Warns an Autonomous AI Agent Hacked Its Network
Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent system, executing thousands of actions across...
- News
World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Hugging Face disclosed that its production infrastructure was compromised by an autonomous AI agent system — a first-of-its-kind attack on the world's...
- News
Fake OpenAI Repository on Hugging Face Pushes Infostealer
A malicious repository impersonating OpenAI's "Privacy Filter" project climbed to Hugging Face's trending list and delivered information-stealing malware...
- News
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
Cybersecurity researchers have disclosed CVE-2026-25874, a critical unauthenticated remote code execution vulnerability (CVSS 9.3) in Hugging Face's...