Hugging Face Security Incident Confirmed

Hugging Face detected and responded to a security incident targeting its production infrastructure in the week prior to July 20, 2026.

Attack Method: Malicious Dataset Exploitation

An autonomous AI agent breached Hugging Face through a malicious dataset that abused two code execution paths: a remote code dataset loader and template injection in a dataset configuration.

Lateral Movement and Credential Harvesting

The attacker escalated to node-level access, harvested cloud and cluster credentials, and moved laterally into several internal clusters over a weekend.

Sophisticated Autonomous Campaign

The Hugging Face attack campaign was executed by an autonomous agent framework performing many thousands of individual actions across a swarm of short-lived sandboxes, with self-migrating command-and-control staged on public services.

No Evidence of Public Content Compromise

Hugging Face found no evidence that the AI agent tampered with public, user-facing models, datasets, or Spaces, and its own software supply chain.

Forensic Analysis Using Non-Western Model

Hugging Face used Z.ai’s GLM 5.2, a Chinese open-weight model, to conduct forensic analysis after Western frontier models refused requests containing real attack commands and exploit payloads due to safety guardrails.

Microsoft Patches Record 570 Security Flaws as AI Accelerates Discovery

Microsoft released software updates to plug at least 570 security holes in July 2026 Patch Tuesday, almost triple the number fixed in June 2026. Microsoft attributed the increase in July 2026 Patch Tuesday vulnerabilities to discoveries aided by artificial intelligence.

Nearly 60 of the bugs earned a critical severity rating, allowing miscreants to seize remote control over a Windows device with little or no user help.

Zero-Day Vulnerabilities Addressed

Microsoft addressed three zero-day flaws in July 2026 Patch Tuesday, including two already being exploited in the wild.

CVE-2026-56155 (Active Directory Federation Services) and CVE-2026-56164 (Microsoft SharePoint) are two zero-day weaknesses that allow attackers to elevate user rights on Windows systems.

CVE-2026-48561 is a remote code execution flaw in Microsoft Copilot with CVSS threat score 9.6 that allows unauthorized attackers to execute code over the network.

Microsoft originally gave the SharePoint zero-day (CVE-2026-56164) an exploitability rating of less likely, but the flaw was added to CISA’s Known Exploited Vulnerabilities list on July 1, 2026.

AI-Generated Exploits Against Microsoft Vulnerabilities

Anthropiс’s Red Team found its Mythos Preview model capable of producing proof-of-concept exploits for 13 of 14 vulnerabilities rated as Exploitation Less Likely or Exploitation Unlikely.

Industry Shift to Accelerated Patching

Microsoft Executive Vice President Pavan Davuluri stated on July 9, 2026 that Windows users will notice a higher volume of security updates due to AI aiding vulnerability discovery.

Adobe announced on July 14, 2026 it is moving to twice-monthly security bulletins published on the 2nd and 4th Tuesday of each month, citing AI for accelerating patch cycles.

Google’s patch batches in June 2026 totaled more than 900 security fixes.

Source: The Hacker News