# Space secrets security update

DevFeed: [Space secrets security update](<https://devfeed.tech/articles/space-secrets-security-update-7487.md>)

Original publisher: [Read original article](<https://huggingface.co/blog/space-secrets-disclosure>)

Author: system

Published: 2024-05-31T00:00:00Z

Content type: news

Language: en

Sources: [Hugging Face - Blog](<https://devfeed.tech/sources/hugging-face-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [spaces](<https://devfeed.tech/topics/spaces.md>), [tenant data protection](<https://devfeed.tech/topics/tenant-data-protection.md>)

Tags: [audit](<https://devfeed.tech/tags/audit.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [data-protection](<https://devfeed.tech/tags/data-protection.md>), [incident](<https://devfeed.tech/tags/incident.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [kms](<https://devfeed.tech/tags/kms.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [space](<https://devfeed.tech/tags/space.md>), [tokens](<https://devfeed.tech/tags/tokens.md>)

## AI overview

Hugging Face reports unauthorized access involving secrets on its Spaces platform and suspects that some Spaces secrets may have been accessed. It revoked a number of HF tokens, recommended refreshing keys and tokens, and encouraged users to use fine-grained access tokens. The company also described security improvements including removing organization tokens, adding KMS for Spaces secrets, strengthening leaked-token detection and invalidation, and planning to deprecate classic read and write tokens.

## Source excerpt

We're on a journey to advance and democratize artificial intelligence through open source and open science.