least privilege
2 posts tagged least privilege. Atom feed for this tag.
- Why did an evaluation agent end up inside a Medicare portal? A research task hit a locked door while it still had a live network connection. Nobody on either side was watching.
- Whose agent was it in the Hugging Face breach? The July intrusion keeps getting filed under AI security. The agents were a lab's own models under evaluation, the bug at Hugging Face was ordinary code execution, and the useful lesson is the one Hugging Face learned during cleanup: keep a defensive model you own, running on your own hardware, wired to your own logs.