The Hugging Face team detected unauthorized access to their Spaces platform, potentially resulting in unauthorized access to a subset of Spaces’ secrets. They have revoked certain HF tokens and recommend users to refresh their keys or tokens and switch to fine-grained access tokens. They are working with cyber security experts to investigate the issue and enhance security measures. Additionally, they have made improvements to the Spaces infrastructure, including removing org tokens, implementing key management service, and planning to deprecate “classic” tokens. The incident has been reported to law enforcement and data protection authorities. Hugging Face apologizes for any disruption caused and is committed to strengthening their security infrastructure. For inquiries, users can contact security@huggingface.co.
Source link
Source link: https://huggingface.co/blog/space-secrets-disclosure
Update on space secrets security: ensuring confidentiality and safety. #SpaceSecurity
