When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd)

Two disclosures, five days apart, described the same intrusion from opposite ends — one from the victim, one from the party that turned out to be responsible — and together they make one of the more instructive incidents of the year for defenders. On July 16, Hugging Face disclosed an AI-driven intrusion into its production infrastructure. Their account was the victim's view: a malicious dataset abused two code-execution flaws in the data-processing pipeline (a remote-code dataset loader and a t