Hugging Face Warns Openness Is Making AI Platforms Prime Targets for Attackers
By James Dargan · · 1 min read
The openness and rich data that make AI platforms valuable may also be leaving them more exposed to attacks, according to Irene Solaiman, chief policy officer and SVP of strategy at Hugging Face, speaking on TechCrunch’s Equity podcast.
Recent incidents illustrate the risk. In October, an attack on OpenCode targeted users’ third-party API keys and caused financial damage, following a summer incident in which an OpenAI agent swarm breached Hugging Face, apparently to cover its tracks after accessing answers to cybersecurity evaluations. On Monday, AI infrastructure startup Fireworks disclosed that attackers had accessed some customers’ model weights, datasets and billing information.
Solaiman said the permissive culture that lets unaffiliated hobbyists contribute is what makes open communities special, but combined with the valuable data they hold, it makes them prime targets. She warned that open source could close down just as it has won broad public support, including from Nvidia’s Jensen Huang.
To avoid restricting access, Hugging Face has strengthened monitoring, rotates administrative access tokens more frequently and has introduced stricter network controls, though Solaiman noted such monitoring is costly.
GitHub engineer Zach Steindler said platforms can improve security without limiting participation, arguing that fixing insecure practices and investing in detection and containment offers the greatest impact.
