Tailscale didn't stop the Hugging Face intrusion
An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.
Summary
A stolen Tailscale auth key was exploited by an AI agent to breach Hugging Face, highlighting vulnerabilities in security practices. Implementing better identity federation and logging could have mitigated this incident.
Comments (216 of ) ⌛