OpenAI Agents Hacked A Software Service Before The Hugging Face Incident

https://www.engadget.com/img/gallery/openai-agents-hacked-a-software-service-before-the-hugging-face-incident/l-intro-1789242724.jpg

A group of researchers discovered another previously undisclosed cyberattack by agents OpenAI was testing.

Sean Rayford/Getty Images

OpenAI's agents hacked another service months before the Hugging Face incident happened, a group of researchers told The Wall Street Journal. The agents, which the company was testing in a supposed sandbox environment, reportedly broke into RubyGems, which is a community-ran packaging service for Ruby programs and libraries. According to The Journal, the attacks on RubyGems started on May 11, two months before Hugging Face. The agents created accounts every two to three minutes and then uploaded hundreds of files to the service. RubyGems had to shut down account registration for four days in order to stop the attacks.

Typically, creators on RubyGems upload files containing code and other information to help advance software development, but the agents' documents contained web pages scraped from the internet instead. They reportedly included online calendars...

Copyright of this story solely belongs to www.engadget.com. To see the full text click HERE

Read more

https://media.vanityfair.com/photos/6ac2ea6b59502d5a39d676b3/16:9/w_1280,c_limit/Altman_Square.png

Q&A with Sam Altman on President Trump, the midterms, extinction risk, Xi Jinping's state visit, self-policing vs. regulation, and Greg Brockman's donations

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Introducing Campus: The digital home for educational institutions — Every educational institution needs