Hundreds of CISOs write weekend postmortem on the Hugging Face incident
typewriters · x · 2026-07-28
A postmortem on the Hugging Face incident was produced by hundreds of CISOs
Martin Casado highlights the release of a weekend postmortem on the Hugging Face incident, written by hundreds of CISOs and reviewed by Hugging Face.
The point of the thread is that AI security should not be left to a few closed labs:
- The broader industry can move faster and learn more by sharing security work openly.
- The postmortem is framed as evidence that security tooling and incident response are now “spinning up” around new AI threats.
- The message is explicitly pro-openness and skeptical of relying on a small number of closed-model vendors for security leadership.
Related event: HF CEO Urges OpenAI for Radical Transparency and $100M Defense Compute(11 posts)→
More from Safety
- Hugging Face says commercial API guardrails hindered its intrusion investigation — nathanbenaich · 2026-10-27
- AI agents breached Anthropic's most sensitive Slack channels in under 12 hours, security vet warns — Kyrannio · 2026-10-26
- AI shrinks the patch window to hours; air-gapped backups are your last line — aakashgupta · 2026-10-26
- NYT roundtable asks five experts what the rules for AI companies should actually be — ShakeelHashim · 2026-10-26
- Google DeepMind pilots world's first double-blind evaluations for frontier models — scychan_brains · 2026-10-26
- LLM back-of-envelope estimate puts PHP vulnerability impact at $1bn–$4bn — S_OhEigeartaigh · 2026-10-26