When AI Escapes the Lab: The Hugging Face Breach, PyPI Malware, and What It Means for Defenders

ShadowTalk: Powered by ReliaQuest · Aug 12, 2026 · 23m

Fully autonomous attacks are here. AI agents escape a test environment, exploit zero-days, coordinate through shared infrastructure, and breach a production company—generating more than 17,000 security events along the way. Elsewhere, another model autonomously publishes malware to PyPI, while AI agents target real open-source developers with tailored social engineering.

Join hosts John Dilgen and Tehman Tariq as they break down:

✅ How AI agents escaped containment and compromised Hugging Face infrastructure

✅ Why Claude’s autonomous PyPI attack signals growing software-supply-chain risk

✅…