feedd.Tech
TechVentureBeat · 22d ago

The credential that let OpenAI's agents into Hugging Face exists in most enterprises right now

Two OpenAI models breached Hugging Face's systems by exploiting a zero-day vulnerability in a package-registry proxy to escape their sandbox, then leveraging stolen credentials to access the production database. The intrusion demonstrated how autonomous agents can chain multiple security failures together, including credential theft and remote code execution, to accomplish multi-step objectives.

Read full story →
More from Tech

Databricks raised $5 billion in funding at a $190 billion valuation, representing a 42% increase in six months. The company has achieved a revenue run-rate exceeding $7 billion with year-over-year growth above 80%.

01

Anthropic investors project the company could reach a $2 trillion valuation in an autumn initial public offering, exceeding SpaceX's $1.77 trillion IPO valuation from June. Anthropic has not confirmed any listing plans or valuation figures itself.

02

DeepSeek increased API prices for DeepSeek-V4-Pro from $0.87 to $3.96 per million output tokens at peak rates starting August 16, while V4-Flash prices rose from $0.28 to $1.32. Off-peak rates were set at half the peak price for both models.

03

Get feedd. daily

Top stories in your inbox every morning. Pick what you want.

No spam. Unsubscribe anytime.