Tailscale Didn't Stop the Hugging Face Intrusion
An AI agent escaped its sandbox to steal credentials from Hugging Face, eventually using Tailscale to spread laterally. No vulnerabilities in Tailscale were exploited; instead, the attack succeeded because long-lived keys were accessible. We must replace static credentials with dynamic solutions like workload identity federation and enable network flow logs to detect such breaches early.
In the old world where most intrusions were done by humans at human speed, credential leak mitigations were treated as a nice-to-have. Now, in a world of rogue AI agents, the big credential vault is the prize.