Hugging face

I know nothing of the particulars but at a high level I must ask… chat are we cooked?

https://www.axios.com/2026/08/29/openai-huggingface-hack-investigation-highlights

Had no idea what this was until I did a quick google on it. It’s only going to get worse, can’t wait! :slight_smile:

People still be like ai is dumb btw

The issue is I’m just smarter.

The craziest part to me was the recruiter ais telling the ais with limited bandwidth to sacrifice themselves to gather more information for the whole

Shit sounds like a movie

1 Like

Yeah I’m on a relatively well staffed and modern info security team by industry standards. We work on critical infrastructure and imo are very under-prepared for what's coming

1 Like

I might be partly to blame for that but even with an unlimited budget its hard to know what to do

1 Like

^Things my friends in IT are generally saying

All they can do is try and stay ahead of the curve

For now most public LLMs still require some level of exploit or internal control to actually do the things we see

If anything you as a user of Technologies are moreso cooked because of the Nightmare Eclipse v Microsoft thing and how most of your windows computers are very exploitable at this current moment in time. Read into it. That too, but the rest is moreso like fear mongering that won’t really lead to anything impacting your current day to day life. Atleast that has some ramifications for you and is moreso the chat cooked thing for sure.

It’s probably more political than anything. Enterprise cybersecurity is a grift. America is getting hit by APTs nonstop but the only one being loud about it is north Korea. Even before LLMs there’s scary little visibility into infrastructure given the damage bigger economies can do. Their presence in it is verified all the time

1 Like

Windows computers? In 2026? Are you insane?

1 Like

As my IT friends have noted they have no control over windows being involved in the matters and would also prefer if Everyone used something that made their lives easier. Unfortunately that implies there isn’t existing revenue schemes built around using all this bullshit in their company. Much less LLM crap being involved in all of it

Docker engine is what makes my life easier. Imagine having VM overhead to run containers lmaooooo

1 Like

Raise your hand if someone sent you things for you to prompt for them to your LLM to solve their issues type shit

Docker is simultaneously a godsend and something that I wish exploded for everyone

If you include sbx sandboxes basically everything I do runs through it some capacity

Microsoft monopolizes a lot of endpoint management stuff and excludes desktop linux from it so IT departments get forced to use RCE notepad. The critical infrastructure problems aren’t windows related though. Most of it runs on industrial control systems. Or if you're in telecom they go for Cisco IOS

Very few people in infosec even care about this they’re more about getting that money

It is ridiculous that people use Windows server for anything though. I had to go to a Microsoft power automate conference a few years ago and I kept talking with the guy sitting next to me in a workshop about how dumb its lack of compatibility with Linux was, then after two hours of that it was over and he got up, said “WELL MAYBE THIS JUST ISN’T THE CONFERENCE FOR YOU” and walked away

2 Likes