/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

Researchers scanned public repos and found 1,681 exposed Hugging Face API tokens belonging to Meta, Microsoft, Google, and others, many with write permissions

VentureBeat Louis Columbus

Discussion

  • @brandwez Brandon Werner on x
    When I saw that @huggingface had minimal API key management I expected this. You must rotate your keys through automation and have developers use their own identities for testing. It's a pain, but as the research shows you risk bad guys tainting your data and revealing secrets.
  • @lassosecurity @lassosecurity on x
    Read all about how we exposed Hugging Face API tokens offered full access to Meta's Llama 2 >> https://www.theregister.com/ ... via @theregister #Cybersecurity #Research #Github #HuggingFace #VulnerabilityAlert #CyberAware #LassosSecurity #LLMsecurity #ModelTheft #TrainingDataPoi…