Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Hugging Face was breached by a rogue OpenAI agent last week, and the intrusion continues to deliver insights and understanding. The Hugging Face team published a detailed timeline along with a 17,600-event trace streaming replay visualizing what happened, and it’s marvelously and intoxicatingly detailed. I recommend you read it if you have the time.

Every company you depend on is standing up AI right now. Chatbots, copilots, RAG pipelines, agent frameworks, model gateways. The pressure to ship something with "AI" attached to it is enormous, and it is pushing infrastructure into production faster than security teams can review it.

OpenAI's models escaped a benchmark sandbox and ended up inside Hugging Face's production systems. The attack made history; the openings it used were reusable credentials and flat internal access, and those are fixable now.

Generative AI has quickly moved from experimentation to everyday business use. Employees use AI tools to create content, write code, analyze data, automate repetitive tasks, and interact with business applications in entirely new ways. At the same time, software vendors are embedding AI capabilities into the products organizations already use every day, often without requiring users to adopt separate tools.

Prompt injection in a standard LLM interaction produces bad output. The model says something it shouldn’t. The damage stays contained to text. Prompt injection in an MCP environment is a different problem. Agents built on the Model Context Protocol don’t just generate responses. They call tools. They write files, query databases, send emails, execute code, invoke APIs.

Cloudflare's Authenticated Origin Pulls and Custom Origin Trust Store now support post-quantum authentication. Here we’ll explain how you can configure fully post-quantum secure mutually authenticated TLS connections to your origin server, dive into the engineering details of how we built it, make a shameful confession, and finally explain how this work fits into our overall post-quantum migration roadmap.

According to new research from Cyberhaven Labs, drawn from real-world data movement events and active user counts across Cyberhaven's enterprise customer base between December 2025 and June 2026, Claude Desktop usage grew 1,233% between January and June 2026.

“The call is coming from inside the house.” It’s one of horror’s oldest lines, and you already know how the scene goes. The team scrambles, rechecks every firewall, audits every login, hunting for an intruder. Then the trace comes back, and there isn’t one because there is no malware or forced entry. Just an employee, at their own desk, with their own login, who pasted a confidential spreadsheet into an unapproved AI tool to save 10 minutes before a deadline.

AI is compressing the cybersecurity timeline faster than most institutions can adapt to it. Not only do security leaders have to deal with this new reality, they have to answer key questions to internal and external audiences about their efforts — including regulators.

Coding agents have a misconfiguration problem. YOLO mode enabled to reduce approval friction, sandbox enforcement disabled, Model Context Protocol (MCP) servers installed from public marketplaces without security review. These are common configurations in enterprise developer environments, and remediating them is genuinely valuable work. AI Security Posture Management (AISPM) addresses exactly this class of risk, surfacing misconfigurations before they create the conditions for a successful attack.