[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkUN5W_4Aj8rBwAH2rKczFY_QkHtTQfPsqXKuewZ1Gcw":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":108},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"a826b2eb-0df5-48a3-ad6a-c05891fe8b8f","Hugging Face Has a Deepfake Nudes Problem","hugging-face-has-a-deepfake-nudes-problem-c9320a","Researchers tested top image editing models on Hugging Face and found they could easily create explicit deepfakes—and 1,000 image editing prompts show how people use the software.","A report by AI Forensics found that seven out of nine top image editing models on Hugging Face can easily create explicit deepfakes, with users frequently requesting to undress or sexualize images, often targeting women and apparent children. Despite Hugging Face's policies against such content, the tested models lacked safety guardrails, and many prompts received were sexual in nature, indicating widespread misuse of the platform for generating nonconsensual intimate imagery.","Hugging Face hosts AI models that can easily create nonconsensual deepfake nudes.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fhugging-face-has-a-nonconsensual-deepfakes-problem\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a67cfabae27b42b1eabd681\u002Fmaster\u002Fpass\u002FSecurity_HuggingFaceHasaDeepfakeNudesProblem_v1.gif","2026-07-28T05:30:00+00:00","2026-07-28T06:00:18.704232+00:00",8,[17,20,23],{"name":18,"type":19},"Hugging Face","vendor",{"name":21,"type":22},"AI Forensics","threat_actor",{"name":24,"type":25},"generative AI","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":26,"icon":28,"name":29,"slug":30},null,"AI Security","ai-security",[32,37,39,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":52,"vendors":107},[53,82],{"slug":54,"name":55,"problem":56,"products":57},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"slug":30,"name":83,"problem":84,"products":85},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[86,91,99],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":87,"product_name":88,"url":89,"description":90},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[],{"slug":109,"title":110,"body":111,"framework_refs":112,"framework_notes":123},"hugging-face-ai-models-weaponized-for-deepfake-nonconsensual-imagery","Hugging Face AI Models Weaponized for Deepfake Nonconsensual Imagery","Seven of nine top image-editing models on Hugging Face lacked safety guardrails, allowing users to easily generate explicit nonconsensual intimate imagery (NCII), including apparent child sexual abuse material. The root failure is a configuration management gap: models were deployed publicly without mandatory content safety filters or prompt screening mechanisms. This matters because the platform's own policies were rendered meaningless without technical enforcement — policy without control is not security. The widespread misuse also signals a critical monitoring blind spot, as abusive prompt patterns went undetected and unmitigated at scale. Beyond reputational harm, this exposes Hugging Face and downstream users to significant legal liability under emerging NCII and CSAM legislation globally.",[113,114,115,116,117,118,119,120,121,122],"NIST AI RMF - GOVERN 1.1 (Policies for responsible AI deployment)","NIST AI RMF - MAP 5.1 (Identify and assess AI risks)","CIS Control 3: Data Protection","CIS Control 8: Audit Log Management","GDPR Article 5 (Data minimisation and integrity)","GDPR Article 25 (Data protection by design and by default)","EU AI Act - Article 5 (Prohibited AI practices including CSAM generation)","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 SI-10: Information Input Validation","UK Online Safety Act 2023 - Illegal content duties",{}]