Hugging Face Says Autonomous AI Agent Breached Its Production Infrastructure

Hugging Face has disclosed that an intrusion into its production infrastructure was carried out end-to-end by an autonomous AI agent framework, marking one of the first prominent real-world cases of a fully agentic attacker. The company said the campaign executed thousands of individual actions through a swarm of short-lived sandboxes and deployed a self-migrating command-and-control channel on public services before it was detected and contained.