🎯 Command and control via public services

The items that name it 2

• Four incident-response decisions from the Hugging Face breach
  article2026-07-29It is written here as Command-and-control via public services.

  Established C2 using ordinary public services, public request-capture services, pastebins and file-sharing hosts

• The AI agent sandbox escape that breached Hugging Face: what happened, and what to fix
  writeup2026-07-27It is written here as Command and control via public services (self-migrating C2).

  Hugging Face describes self-migrating command and control staged on public services, executed across a swarm of short-lived sandboxes.