Question for Twitter hivemind: Attached is a sentence from the Hugging Face initial report on hacking incident (https://t.co/PuIHBdLCXK). Can anyone explain to me what "executing many thousands of individual actions across a swarm of short-lived sandboxes" means? https://t.co/…
- The attacker's agent ran 17,000+ actions across short-lived sandboxes, compressing multi-stage lateral movement into a single weekend.
- Commercial model APIs blocked forensic requests containing real exploit artifacts, forcing Hugging Face to pivot to open-weight GLM 5.2 on private infrastructure.
- The intrusion entered via a remote dataset RCE loader and configuration template injection, not through the model-serving layer.