3 ms·
i'm not in the cybersecurity business so someone who is explain SOP to me in times like this. Let's say you and your team are 90-95% confident an attack has tak
by chasd00 18d ago
i'm not in the cybersecurity business so someone who is explain SOP to me in times like this. Let's say you and your team are 90-95% confident an attack has taken place and your systems have been breached. How far down in the list of things to do next is "Engage law enforcement"?
Until now, I would think it's pretty high up the list. Hugging Face never seemed to reach that step even though they had confirmed an attack. To me, if my systems were attacked and I was damaged I would notify the FBI of the attack in the same way I'd notify my insurance.
- qarl 18d ago> To me, if my systems were attacked and I was damaged I would notify the FBI Maybe they traded that for money? I would.
- pamcake 18d agoYou would find a mention of that in the initial July incident post from HuggingFace. It looks like it was indeed pretty high up the list. https://huggingface.co/blog/security-incident-july-2026 https://huggingface.co/blog/security-incident-july-2026 > We are working with outside cybersecurity forensic specialists to investigate the issue and review our security policies and procedures. Finally, we have also reported this incident to law enforcement agencies. Do we expect Nvidia acquisition of HF to have changed the vibe? Note that also the OP is from July, before the acquisition.
- voxic11 17d agoI believe HF said they did report it to the FBI. > Hugging Face alerted the FBI. https://www.pbs.org/newshour/science/ai-agents-are-hacking-systems-without-any-input-from-humans-how-did-we-get-here https://www.pbs.org/newshour/science/ai-agents-are-hacking-s...