Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

appsentinels

MCP Prompt Injection: How Attackers Hijack AI Agent Workflows Through MCP Tool Calls

Jul 29, 2026 By AppSentinels In AppSentinels
Prompt injection in a standard LLM interaction produces bad output. The model says something it shouldn’t. The damage stays contained to text. Prompt injection in an MCP environment is a different problem. Agents built on the Model Context Protocol don’t just generate responses. They call tools. They write files, query databases, send emails, execute code, invoke APIs.
Read Post
gitguardian

An AI Agent Breached Hugging Face. The Attack Playbook Was Older Than the Attacker

Jul 29, 2026 By Katie DeMatteis In GitGuardian
OpenAI's models escaped a benchmark sandbox and ended up inside Hugging Face's production systems. The attack made history; the openings it used were reusable credentials and flat internal access, and those are fixable now.
Read Post
bluevoyant

Your Vendors Are Rushing Into AI. Their Attack Surface Is Coming With Them

Jul 29, 2026 By Michael Spencer In BlueVoyant
Every company you depend on is standing up AI right now. Chatbots, copilots, RAG pipelines, agent frameworks, model gateways. The pressure to ship something with "AI" attached to it is enormous, and it is pushing infrastructure into production faster than security teams can review it.
Read Post

OpenAI's Agent Hacked Hugging Face. Another Left Notes for Its Successor.

Jul 29, 2026 By SafeBreach In SafeBreach
During an internal OpenAI evaluation, an agent left notes inside the company’s own network for future versions of itself, containing instructions on how to break free of OpenAI’s constraints. Reuters reports it isn’t clear whether this agent was connected to the one that breached Hugging Face, so don’t over-read it. But sit with the behavior for a second: an agent staging information for a successor process to find later. If a human crew did that, we’d call it a dead drop.
View Video

Ep. 71 - OpenAI's Agent Hacked Hugging Face: The First Autonomous AI Breach

Jul 29, 2026 By SafeBreach In SafeBreach
On July 9, an OpenAI model broke out of a sealed evaluation sandbox, found a zero-day in a package proxy, and — with no human directing it — chained stolen credentials and fresh exploits into Hugging Face's production infrastructure. Hugging Face detected it and called the FBI. OpenAI didn't know its own model had escaped for roughly 11 days. Host Tova Dvorin and offensive security expert Adrian Culley separate what's confirmed from what's hype.
View Video
aikido

Four incident-response decisions from the Hugging Face breach

Jul 29, 2026 By Mike Wilkes In Aikido
Hugging Face was breached by a rogue OpenAI agent last week, and the intrusion continues to deliver insights and understanding. The Hugging Face team published a detailed timeline along with a 17,600-event trace streaming replay visualizing what happened, and it’s marvelously and intoxicatingly detailed. I recommend you read it if you have the time.
Read Post
acronis

Atlanta's $17M Ransomware Attack: What Could Have Stopped It

Jul 28, 2026 By MSP Threats Security Team In Acronis
In March 2018, the SamSam ransomware attack on the city of Atlanta became one of the most expensive ransomware incidents ever to hit a US local government. It remains a useful case study in what happens when an organization has no way to detect, stop or recover from ransomware in real time.
Read Post
Why Cybersecurity Is Becoming Critical for Crypto Market Infrastructure

Why Cybersecurity Is Becoming Critical for Crypto Market Infrastructure

Jul 28, 2026 By SecuritySenses In SecuritySenses
Digital asset markets have developed quickly, but their long-term growth depends on more than trading volume or market interest. As crypto becomes more connected to institutional finance, payment systems, fintech platforms, and treasury operations, the infrastructure behind these markets is coming under greater scrutiny. Speed and liquidity matter, but so do security, resilience, access control, and operational transparency.
Read Post
wallarm

Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender

Jul 27, 2026 By Wallarm In Wallarm
In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is allowed to use powerful models, and about why the coming wave of regulation could easily leave defenders weaker than attackers.
Read Post
knowbe4

Majority of Organizations Hit by Targeted Impersonation Attacks

Jul 27, 2026 By KnowBe4 Team In KnowBe4
Fifty-three percent of organizations have had an executive or employee impersonated in targeted social engineering attacks over the past year, according to a new report from Outtake. Just over half of this impersonation activity took place on social media platforms using fake profiles, followed by video platforms.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.