Add Guide - Hugging Face Incident Initial Post-Mortem

[andy-smith-tracebit]

Motivation

• Surface the CSA "Hugging Face Incident Initial Post-Mortem" in the Guides section so readers can find the expedited strategy briefing that recommends deploying deceptive identities, credentials, package registries, datasets, APIs, and clusters to slow attackers and generate high-confidence indicators.

Description

• Appended a single Guides entry: - [Hugging Face Incident Initial Post-Mortem](https://s3.amazonaws.com/content-production.cloudsecurityalliance/semxe47vxhaqctzr4xeb1khbztvv?response-content-disposition=inline%3B%20filename%3D%22Hugging%20Face%20Incident%20Initial%20Post-Mortem_v.8f.pdf%22%3B%20filename%2A%3DUTF-8%27%27Hugging%2520Face%2520Incident%2520Initial%2520Post-Mortem_v.8f.pdf&response-content-type=application%2Fpdf&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6XDIRHKHO4F5SU4%2F20260807%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260807T180358Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=2826498bb01aa1503d9cbe5699a0863f1763ee248c607ea1e9e07063f343f4bc) (2026) - Expedited strategy briefing that recommends deploying fake identities, credentials, package registries, datasets, APIs, and clusters to slow attackers and generate high-confidence indicators., following the repository formatting rules and appended to the end of the Guides subsection.
• Committed the change with message Add Guide - Hugging Face incident post-mortem (commit 38b7128).

Testing

• Ran a Python verification script that asserted the entry is unique, includes (2026), and is appended as the last line of the Guides section, and the assertion succeeded.
• Ran git diff --check, git diff -- README.md, and git status --short to validate the diff and commit, and those checks succeeded and the change was committed.
• Checked for duplicate occurrences of the target token and confirmed a single instance via a ripgrep count assertion, which passed.
• External URL verification attempts with curl and web queries were blocked by the environment (returned HTTP 403 / web API 401), so a direct fetch of the PDF could not be completed in this environment.

---

Codex Task

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: dd956b3e48

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Replace the expired presigned URL

For every reader after 2026-08-07 18:08:58 UTC, this AWS SigV4 URL is invalid: X-Amz-Date=20260807T180358Z with X-Amz-Expires=300 gives it a five-minute lifetime, which ended more than a day before this commit was created. S3 will therefore reject the link instead of serving the newly listed PDF; replace it with a persistent CSA landing-page or download URL.

AGENTS.md reference: AGENTS.md:L32-L34

Useful? React with 👍 / 👎.