The Hugging Face Breach: Part Incident Report, Part Product Launch | Prophet Security
OpenAI's own models caused the Hugging Face breach. Marketing or not, the tradecraft was real: what the first agent-run intrusion means for your SOC team.
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
5 matching stories — incident, in Threat Hunting — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
OpenAI's own models caused the Hugging Face breach. Marketing or not, the tradecraft was real: what the first agent-run intrusion means for your SOC team.
Citrix NetScaler zero-day CVE-2026-88771 and CVE-2026-88772 were exploited for weeks. How to hunt for unique web shells, deleted logs, and stolen credentials.
Prophet ran a hunt for CVE-2026-58644 as it emerged. How to detect SharePoint zero-day exploitation, investigate a suspected web shell, and hunt retrospectively for compromise.