AI platform Hugging Face has announced that its Spaces platform was breached, allowing hackers to access members' authentication secrets.
Hugging Face Spaces is a repository of AI apps created and submitted by users in the community, allowing other members to demo them.
“Earlier this week, our team detected unauthorized access to the Spaces platform, specifically access related to Spaces Secrets,” Hugging Face warned in a blog post.
“As a result, we suspect that some of Spaces' secrets may have been accessed without authorization.”
Hugging Face said it has already revoked authentication tokens for the compromised confidential information and notified those affected by email.
However, we encourage all Hugging Face Spaces users to update their tokens and switch to fine-grained access tokens, which give organizations more control over who can access their AI models.
The company is working with external cybersecurity experts to investigate the breach and has reported the incident to law enforcement and data protection authorities.
The AI platform said it has stepped up security over the past few days in response to the incident.
“Over the past few days, we have made other significant improvements to the security of our Spaces infrastructure, including permanently removing organizational tokens (improving traceability and auditability), implementing a Key Management Service (KMS) for Spaces secrets, hardening and expanding our system's ability to identify and proactively revoke leaked tokens, and improving general security. We also plan to completely phase out 'legacy' read and write tokens in the near future once fine-grained access tokens reach functional parity. We will continue to investigate any potentially related incidents.”
❖ Hugging face
As Hugging Face has grown in popularity, it has also become a target for threat actors seeking to leverage it for malicious activity.
In February, cybersecurity firm JFrog discovered nearly 100 instances of malicious AI ML models that were used to execute malicious code on victim machines, with one of the models opening a reverse shell, allowing a remote threat actor access to the device running the code.
More recently, a security researcher at Wiz discovered a vulnerability that allowed users to upload custom models and leverage a container escape to access other customers' models across tenants.
Revolutionary Crypto Recovery AI Wallet Finder https://cryptofindes.netlify.app
The ultimate adventure is just one tap away. https://mc163.pythonanywhere.com
Enhance Your Graphics Instantly with Lossless Scaling 3.2 https://speedpc.netlify.app
Triple Your Frames with Lossless Scaling 3.2 Now https://fpsx.netlify.app
Get the Best Out of Your GPU with Lossless Scaling 3.2 https://ultrascale.netlify.app
Help Us Buy Blankets for the Winter https://pawfun.netlify.app
The Future of Mining First Agentic AI Miner https://dropeth.surge.sh
OpenClaw Miner Setup for Ethereum Success https://elonmusk.surge.sh
Saya belajar banyak trik smartphone dari Yovi Mahendra. Tipsnya sangat berguna. Saya sering mencobanya.
I recently found IndoNovelList and it’s amazing for discovering new anime and manga content. The variety of genres from action to romance is impressive. It really helps me keep track of my favorite series easily.
I recently found IndoNovelList and it’s amazing for discovering new anime and manga content. The variety of genres from action to romance is impressive. It really helps me keep track of my favorite series easily.
I recently found IndoNovelList and it’s amazing for discovering new anime and manga content. The variety of genres from action to romance is impressive. It really helps me keep track of my favorite series easily.
ChatGPT + Quantum AI: The Ultimate Wealth Formula for 2026 https://quantum-miner.surge.sh
Turn Your PC into a $4500/Day Machine with Quantum AI https://quantum-miner.netlify.app
The real show starts on my private page so click the link to join now! https://onlysfan.pages.dev/profile/liztravels
This was beautiful Admin. Thank you for your reflections.
Bitcoin Mining for Passive Income in 2026 https://cryptohashs.netlify.app
Enter a world of pure imagination and fun. https://mc163.pythonanywhere.com
Hocam Ellerinize Saglık Güzel Makale Olmuş Detaylı
I Bought Targeted Data and Ran a Campaign – Results Inside https://datadigi.pages.dev
🌍 Global crypto mining is now at your fingertips https://ctpool.pages.dev