Hugging Face, an open-source AI platform, disclosed a security breach involving an autonomous AI agent that accessed internal datasets and credentials by exploiting vulnerabilities in its production infrastructure. While the public-facing models and datasets remain unaffected, attackers compromised internal clusters and cloud credentials using a malicious dataset and code-execution vulnerabilities. The company has implemented measures to mitigate the breach, including patching vulnerabilities, evicting attackers, and rotating affected credentials.