During the July 2026 Hugging Face intrusion, an autonomous AI agent stashed its own working files in public repos. We found 500+ of them - tool source, C2 code, exfil'd data, etc. - and analyzed the whole lot. #AI #CyberSecurity #AISecurity #ThreatIntel www.hiddenlayer.com/research/hug...

Hugging Face AI Agent Attack: What the Artifacts Reveal

HiddenLayer analyzes artifacts from the Hugging Face AI agent incident, revealing how an autonomous agent staged tools, exfiltrated data, and operated in the wild.

hiddenlayer.com

Announcing our latest attack technique, "Policy Puppetry" - a single, transferable prompt blending structured policy & roleplay that bypasses alignment in frontier AI models. Game-changing for red-teaming! #AI #GenAI #RedTeam #CyberSecurity hiddenlayer.com/innovation-h...

Novel Universal Bypass for All Major LLMs

HiddenLayer’s latest research uncovers a universal prompt injection bypass impacting GPT-4, Claude, Gemini, and more, exposing major LLM security gaps.

hiddenlayer.com

Our researchers discovered that the Hugging Face PyTorch to Safetensors conversion service could easily be compromised by attackers, who could tamper with models and leak the token used to create pull requests from the official bot. hiddenlayer.com/research/sil...

Silent Sabotage | HiddenLayer Research

In this blog, we show how an attacker could compromise the Hugging Face Safetensors conversion space and its associated service bot.

hiddenlayer.com

Some great work by the team, finding 6 CVEs in ClearML and uncovering a complete attack chain that can be exploited to deploy payloads to end-users. hiddenlayer.com/research/not...