Morning brief

Monday, July 20

1 people · 0 companies · 3 topics

TL;DR Hugging Face disclosed an autonomous AI agent breach of its dataset pipeline, logging 17K+ attacker actions in what appears to be the first documented end-to-end AI-driven intrusion at a major AI platform. Separately, Current AI raised $400M to build open, publicly governed AI infrastructure.

Tools & dev

  • agentic-ai Hugging Face disclosed July 20 that an autonomous AI agent breached its dataset processing pipeline, executing over 17,000 logged actions. Attacker exploited a remote-code dataset loader and a template-injection flaw, escalated to node-level access, and harvested internal cluster credentials. No public models, datasets, or Spaces were tampered with. Both the attack and the detection pipeline ran on AI agents, making this the clearest example yet of AI-vs-AI security in production. BleepingComputer · Help Net Security

  • EU adopted two binding DMA decisions requiring Google to give rival AI assistants the same Android access as Gemini: mic, camera, screen, wake-word while display is off, and the ability to drive other apps. Must ship in Android 18 by August 2027. A separate order requires Google to share Search data with competing AI services on FRAND terms starting January 2027. Dataconomy

People

  • simonw posted “A quote from Sam Altman” today, highlighting a line from Altman’s October 1, 2022 email to OpenAI’s board that surfaced during the Musk v. Altman trial. simonwillison.net

Other

  • Current AI, a nonprofit led by CEO Ayah Bdeir, announced $400M in committed funding: $100M from the French government plus the Ford Foundation, MacArthur Foundation, DeepMind, and Salesforce. Goal is open, publicly governed AI infrastructure. First product is Suno Sutra, an offline device running AI in 22 Indian languages. TechCrunch

OSS

  • diegosouzapw/OmniRoute (1,343 new stars today, 20.9K total): MIT-licensed AI gateway routing across 268+ providers and 500+ models with auto-fallback and token optimization. GitHub

  • tirth8205/code-review-graph still surging: 1,876 new stars today vs 663 yesterday, now at 22.5K total. Local-first codebase intelligence graph for MCP and CLI tools. GitHub