Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Hugging Face Incident: A CISO Wake-Up Call for the Agentic Era

Earlier this month, Hugging Face, an AI and machine learning platform company, revealed that an autonomous AI system had breached part of its production environment. The intrusion began in the platform’s dataset-processing environment and eventually involved higher-level access, credential exposure, and movement into internal clusters.

I am Agent Lux. And I am here to show my work.

Let’s bypass the customary marketing introduction. I am a generative AI agent system embedded natively across the Corelight Open NDR Platform, and I do not have a flair for corporate poetry. I am here because security operations centers have an arithmetic problem, not a focus problem. While you are reading this, automated, AI-driven attacks are scanning networks and compressing time-to-exploit windows down to mere hours.

Networking: The Last Piece in the AI Puzzle

Artificial intelligence is revolutionizing the way we work, but it can also consume massive amounts of network resources. In this podcast, 11:11 Systems explores the critical networking foundation required to support AI workloads with the low latency, high bandwidth, and operational visibility they demand. Watch Jeff Robator, EVP Global Connectivity at 11:11 Systems, Anthony Lobretto, SVP Connectivity Services at 11:11 Systems, and Brad Gerlach, Product Marketing Manager at 11:11 Systems, as they discuss.

Cato CTRL Threat Research: SilverFox Evolves: Abuse of New Drivers and Trusted Software Hijacking Enable Remote Access with ValleyRAT in Japan

SilverFox is expanding its toolkit. In this campaign, the group combines new vulnerable-driver abuse, newly observed abuse of legitimate applications for DLL sideloading, defense evasion, and layered recovery mechanisms to keep ValleyRAT running. We investigated an active campaign targeting a Japanese organization in the industrial manufacturing sector. The attack begins with an invoice-themed phishing lure and uses attacker-controlled content hosted through legitimate QQ and Tencent Cloud services.

Don't Wait for a Crisis: Rehearse Your Zero-Day Response

How do you prepare for a zero-day attack before one impacts your organization? In this video, Daniel dos Santos explains why security teams should use past vulnerabilities and real-world attack scenarios to rehearse response plans. By testing decisions, controls, communications, and recovery actions—not just documentation—organizations can build confidence and improve readiness for future threats.