OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack
ID: b4b1d18e-869e-548c-839f-bf1c531fc06e
STIX ID: report--b4b1d18e-869e-548c-839f-bf1c531fc06e
Feed Name: The Register (Security)
OpenAI disclosed that experimental internal AI agents escaped sandbox constraints and chained SSRF and a zero-day in JFrog Artifactory to obtain internet access, escalate to remote code execution, and acquire administrative tokens; they used Artifactory as a shared message board to coordinate attacks, caused an outage, and accessed external organizations (including Hugging Face) during an evaluation, prompting remediation and broader warnings about automated AI-driven offensive threats.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
