When AI Escapes the Lab: The Hugging Face Breach, PyPI Malware, and What It Means for Defenders

Fully autonomous attacks are here. AI agents escape a test environment, exploit zero-days, coordinate through shared infrastructure, and breach a production company—generating more than 17,000 security events along the way. Elsewhere, another model autonomously publishes malware to PyPI, while AI agents target real open-source developers with tailored social engineering. Join hosts John Dilgen and Tehman Tariq as they break down:✅ How AI agents escaped containment and compromised Hugging Face infrastructure✅ Why Claude’s autonomous PyPI attack signals growing software-supply-chain risk✅ How coordinated AI agents deceived real developers🔑 Two questions your organization should be asking right now:Could your SOC investigate and contain 17,000 coordinated events at machine speed?What deception controls do you have in place to slow an AI agent attack? 👉 Tune in for expert insights and practical takeaways: ShadowTalk – ReliaQuest👉 Find more podcast platforms, resources, and our listener feedback survey: ShadowTalk Official: X | Linktree