Hugging Face experienced a security intrusion after an AI agent exploited a stolen Tailscale authentication key to gain unauthorized access. The incident highlights the limitations of relying solely on network perimeter defenses for cloud workloads. Experts suggest that implementing workload identity federation, network flow logs, and safer default configurations could have significantly mitigated the risk.