Hugging Face breach turns datasets into attack path

Send us Fan Mail A breach at Hugging Face is shifting attention away from models and toward something more fundamental: data ingestion as an attack surface. Attackers used a dataset to trigger code execution, then moved laterally and stole credentials, all at machine speed using autonomous agents. This matters because most security programs still treat ingestion pipelines, support systems, and internal tooling as low-risk infrastructure. That assumption is breaking down. From edge devices acting as credential harvesters to AI agents operating with legitimate access, the identity perimeter is expanding in ways many teams cannot yet see or control. We also cover SonicWall exploitation timelines, Neo's bet on AI agent governance, and a quiet but serious data leak through EY's support systems, along with key developments across supply chain attacks and SaaS-native malware. Learn more at https://crestvale.io Support the show