"Our anomaly-detection pipeline uses LLM-based triage over security telemetry to separate real signals from the daily noise, and it was the correlation of those signals that flagged the compromise."

After reading https://huggingface.co/blog/security-incident-july-2026:

I still have no clue what was detected or how bad this really is. There are a lot of words, but little to no concrete information. What is the current security architecture like? What is detected, and where? What goes undetected because logs aren't available? How many user datasets are at risk?