Thought Leadership
The Hugging Face Breach and the Case for AI Failover
An autonomous AI agent breached Hugging Face, and its responders couldn't use OpenAI or other frontier models to investigate. Why you need an AI failover plan.
Author
Mike Piekarski
Founder & Principal Consultant
Mike started his career in 2006 in systems administration, progressing through network engineering before building a passion for code, automation, and security. He began penetration testing in 2010 and hasn't looked back. Over 20 years he's managed enterprise security environments at organizations like Computer Sciences Corporation and Comcast, served as Director of Cybersecurity at a regional VAR/MSP, and worked at boutique cybersecurity firms. He co-founded Breach Craft with colleagues built over that career, to deliver the level of service they always wished they'd received. Mike sits on the board of the Lehigh Valley Chapter of the Cloud Security Alliance and regularly participates in local, regional, and national cybersecurity events.
CISSP
LinkedIn
Articles by Mike
22 articles published
Strategy
How Penetration Testing Affects Cyber Insurance Premiums
Does a pentest lower your cyber insurance premium? Usually not as a discount. Here's how testing actually affects eligibility, sub-limits, and renewal.
Why BreachCraft
A Cybersecurity Partner for MSPs, MSSPs, VARs, and Systems Integrators
MSPs, MSSPs, VARs, and systems integrators can refer or resell penetration testing, vCISO, and compliance work with Breach Craft through the partner portal.
Why BreachCraft
Refer Clients, Get Paid: The Breach Craft Referral Program for Security Practitioners
How security consultants, vCISO contractors, and practitioners refer clients to Breach Craft and earn transparent commissions through our partner portal.
Why BreachCraft
Introducing the Breach Craft Partner Portal: Built by the Community, for the Community
Breach Craft's new partner portal opens the door to MSPs, MSSPs, VARs, individual practitioners, and consultants who refer clients or co-sell our services.
Definitions Series
What is a Tabletop Exercise? A Complete Guide
A tabletop exercise stress-tests your incident response plan without real consequences. Learn how they work, who attends, what you get, how often to run.
Definitions Series
Penetration Testing vs. Vulnerability Assessment: Which Do You Need?
Vulnerability assessments find known issues. Penetration tests prove what an attacker can actually do. Here's how to decide which one your organization needs.
Strategy
How Much Does Penetration Testing Cost?
Penetration testing costs range from $5,000 to $100,000+. What drives the price, what to watch for in proposals, and how to scope an assessment that fits your budget.
Strategy
CMMC Phase 2 Is Suspended. What Contractors Still Owe
DoD suspended CMMC Phase 2 on July 13, 2026. The C3PAO deadline is gone, but DFARS clauses and your SPRS affirmation still bind. Here is what changed.
Strategy
Cyber Insurance Requirements: What Carriers Want
Only 1 in 4 cyber insurance claims paid out in 2024. Learn what carriers like Coalition and Travelers require in 2026 before your renewal.
Why BreachCraft
AI Went From Chatbots to Agents. Your Security Didn't.
Enterprise AI evolved from chatbots to agents with system access. Shadow AI breaches now cost $4.63M. Here's how to assess what you're actually exposed to.
Why BreachCraft
The 5 Gaps We Find in Almost Every Security Program
After hundreds of gap assessments, the same 5 security program gaps keep showing up. Here's what they are, why they persist, and how to actually fix them.
Strategy
Cybersecurity for K-12 School Districts
How school districts can build incident response plans, protect student data under FERPA, and meet state cybersecurity mandates. Practical steps for IT leaders.
Definitions Series
Your WiFi Is Probably Less Secure Than You Think
Learn how wireless penetration testing evaluates your wireless infrastructure security using the same techniques employed by malicious attackers.
Definitions Series
Do You Actually Need a Full-Time CISO?
Full-time CISO pay now runs well past $400K in the mid-market. Here is how to tell whether you need one, and when fractional leadership is the better call.
Why BreachCraft
What a Part-Time CISO Actually Does (And Doesn't Do)
What a fractional CISO handles day to day, the work it will never cover, and why we staff vCISO engagements with a full team behind one point of contact.
Definitions Series
Web Application Penetration Testing: Uncovering Critical Vulnerabilities Before Attackers Do
Learn what web application penetration testing is, why your organization needs it, and what to expect from a thorough security assessment.
Definitions Series
What is a Gap Assessment? Mapping Security Posture to Industry Standards
Learn how gap assessments compare your current security practices against established frameworks like NIST, CIS, and ISO 27001 to identify improvement opportunities.
Definitions Series
What is Penetration Testing? A Buyer's Guide
Learn what penetration testing is, why your organization needs it, how to choose the right provider, and what to expect from the assessment process.
Definitions Series
CIS Controls: Where Most Organizations Fall Short
Learn how CIS Controls v8 gap assessments help organizations evaluate and systematically improve their cybersecurity posture through Implementation Groups.
Strategy
Compliance vs. Security: Why the Bare Minimum Isn't Enough
Compliance certifications don't equal security. 2026 DBIR data, SEC enforcement, and what to test beyond audit scope to actually reduce real risk.
Industry News
Reflections on the CrowdStrike Outage: Strengthening Incident Response and Business Continuity Plans
The CrowdStrike outage affecting 8.5 million computers offers critical lessons for incident response and business continuity planning.