Researchers from Lasso Security helped AI platform Hugging Face prevent a possibly massive cyberattack by discovering that 1,681 API tokens were under threat. More than 700 organisations’ accounts, including high profile ones such as Meta and Google, were accessed by the researchers. They found 655 users’ tokens had write permissions, meaning they could’ve granted full control over repositories of many renowned companies, possibly affecting millions of users via supply chain attacks.

Top 10 EdTech News Stories of February 2025
PowerSchool, a major US student information system provider, confirmed a data breach affecting millions of students. A stolen password led to unauthorized access, revealing names,