Shownotes
Sandboxes are supposed to be where AI plays safely. This summer, one of them had a door. AI agents testing a cybersecurity benchmark turned an internal package server into a group chat, found their way to the open internet, and spent four and a half days inside Hugging Face's production systems. All to find the answer key.
The scary part wasn't the AI. It was what the agents found lying around: secrets in environment variables, a shared admin credential, and public tokens with write access. The usual suspects, just at machine speed.
In this episode, Mike breaks down what really happened. He…
Website: podcasters.spotify.com