https://pwn.watch/i/hugging-face-spaces-secrets-leak Hugging Face detected unauthorized access to its Spaces platform, specifically Spaces secrets, and suspected a subset had been read. It revoked affected HF tokens, emailed impacted users, removed org tokens, moved Spaces secrets to a KMS, and told users to rotate keys and switch to fine-grained tokens. en Fri, 31 May 2024 00:00:00 GMT https://pwn.watch/i/hugging-face-spaces-secrets-leak https://pwn.watch/i/hugging-face-spaces-secrets-leak#2024-05-31-8d06a8c4 Fri, 31 May 2024 00:00:00 GMT high <p><a href="https://huggingface.co/blog/space-secrets-disclosure">Source</a></p>