"When we started analysis, we used commercial APIs. This did not work: requests were blocked by the providers' safety guardrails. We ran the forensic analysis instead on our own infra: no attacker data, and none of the credentials it referenced, left our environment" huggingfa…
- The attacker's agent ran 17,000+ actions across short-lived sandboxes, compressing multi-stage lateral movement into a single weekend.
- Commercial model APIs blocked forensic requests containing real exploit artifacts, forcing Hugging Face to pivot to open-weight GLM 5.2 on private infrastructure.
- The intrusion entered via a remote dataset RCE loader and configuration template injection, not through the model-serving layer.