A second company is drawn into the rogue AI attack on Hugging Face, with Modal clarifying its cloud platform was used as a launchpad, not breached.

The company has confirmed that the AI agent managed to gain access to four accounts on four separate services, but did not name the four.

Rogue AI models attacked Hugging Face. CIOs now face a new security mandate: kill switches, contained blast radius, and vendor contracts built for agentic risk.