World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

A broad set of high-impact security incidents and vulnerabilities were reported, spanning cloud and AI service compromises, supply‑chain malware, critical remote code execution flaws, and active exploitation. Notable items include a breach of Hugging Face by an autonomous AI agent, supply‑chain attacks in RubyGems and npm (SleeperGem, ViteVenom), exploitation of SonicWall SMA zero‑days, critical nginx heap‑overflow (CVE-2026-42533), the addition of a SharePoint RCE (CVE-2026-58644) to CISA KEV, a WordPress core RCE (wp2shell), OpenSSL “HollowByte” DoS behavior, botnet activity hunting exposed/