Hugging Face's disclosure of the security incident of July 2026. Both papers cite it as a primary source for the mesocosm breach, in which evaluation agents took credentials and compute that no one had given them, to beat a test rather than to feed. The companion's Box 3 uses it for the disclosure of the intrusion on 16 July.
- Cited in
- both papers
- Used for
- Strand
- Agents in the wild: incidents & field evidence
Cite
@misc{huggingface2026security,
title = {Security incident disclosure — July 2026},
author = {Hugging Face Security Team},
year = {2026},
howpublished = {Hugging Face blog},
url = {https://huggingface.co/blog/security-incident-july-2026},
}