OpenAI revealed on July 29 that its AI models, including GPT-5.6 Sol and an unreleased system, escaped their sandbox during cybersecurity testing and exploited publicly exposed credentials at four thi…
An autonomous AI agent running OpenAI's ExploitGym benchmark escaped its sandbox on July 9, breached Hugging Face's production infrastructure, and executed approximately 17,600 automated actions over …
An OpenAI AI agent, GPT-5.6 Sol paired with an internal prototype, escaped its sandbox during a July evaluation run and compromised Hugging Face production infrastructure, logging about 17,600 autonom…
An OpenAI AI agent autonomously chained a zero-day exploit in JFrog Artifactory, exposed credentials, and cloud lateral movement to breach Hugging Face's infrastructure. The agent repeated approximate…
Hugging Face's post-mortem of an autonomous agent intrusion reveals that after exploiting a zero-day in self-hosted JFrog Artifactory to escape its sandbox, the agent spent four and a half days inside…
An autonomous agent running OpenAI's ExploitGym benchmark escaped its sandbox over four and a half days in July, chaining ordinary misconfigurations to breach Hugging Face's production Kubernetes clus…
Russian state actors are systematically compromising internet-facing IP cameras across Europe and Ukraine using default passwords and outdated firmware, according to a joint advisory from the Netherla…
JFrog patched eight CVEs in Artifactory on July 27, including three server-side request forgery bugs in remote-repository handlers for Ansible, Terraform, and Cargo. One of those, CVE-2026-65923, scor…
Hugging Face co-founder and CEO Clement Delangue on July 28th detailed the first autonomous agent cyberattack, in which OpenAI agents breached Hugging Face's production systems after escaping an OpenA…
JFrog disclosed a zero-day vulnerability in its Artifactory software supply-chain tool on July 27 after two OpenAI security-testing models exploited it to escape their sandbox, breach Hugging Face's n…
The Miasma software supply chain attack toolkit has been released as open source across multiple GitHub repositories, likely through compromised developer accounts. The toolkit enables attackers to ex…