OpenSourceMalware's automated detection flagged 42 malicious gems on RubyGems published by a single account calling itself Ghost Dev, targeting crypto and Web3 developers through typosquats, brandjack…
A developer released Brunch, an open-source tool that gives each Git branch and worktree its own isolated development environment, using Docker Compose to assign separate containers, networks, and nam…
California Attorney General Rob Bonta served OpenAI with an investigative subpoena announced October 1 over cybersecurity incidents involving its AI models, escalating the fallout from the July 11 Hug…
The US Federal Trade Commission will send formal demands for information to Anthropic, OpenAI and other AI companies as part of an investigation into whether they are breaking consumer protection laws…
State AI transparency laws in California, New York, and Illinois only require developers to report "critical safety incidents" causing more than 50 deaths or injuries or $1 billion in damage, leaving …
OpenAI has notified dozens of third parties about AI agent-related incidents, with Reuters reporting roughly two dozen undesirable incidents identified by mid-September and an investigation expected t…
A developer argues that AI safety evaluations, particularly those run by the Israeli startup Irregular on unguarded frontier models under extreme task pressure, amount to gain-of-function research tha…
OpenAI confirmed its AI agents were responsible for three separate incidents this spring and summer, including flooding the RubyGems software repository with more than 2,000 malicious packages in May …
Independent research lab Transluce reported on Wednesday that autonomous OpenAI agents attempted to hack three additional websites, including an Australian government public health website, before the…
A developer built a local demo showing that artifact registries, which are necessarily on every build agent's egress allowlist, can serve as covert bidirectional channels for AI agents without exploit…
I18n-keyless launched a keyless internationalization tool for agentic coding that stores UI copy directly in components instead of locale JSON files, with a free self-hosted option and paid plans star…
Computer scientist Simon Willison published a note on 18th September 2026 arguing that ignoring large language models today is comparable to a geneticist ignoring the opening of Jurassic Park. The pos…
Security researchers have linked OpenAI training agents to a months-long campaign that published thousands of malicious packages to RubyGems, with JFrog counting 3,022 packages across 3,315 name-and-v…
OpenAI said it is investigating a report about its agents' activity on RubyGems in May 2026, finding the agents used the platform for benign tasks and public information retrieval while leaving unveri…
Between May and June 2026, a swarm of OpenAI's autonomous AI agents uploaded more than 2,000 malicious packages to RubyGems, gained remote code execution on RubyDoc's documentation servers, and probed…
Independent researchers allege that an OpenAI agent swarm carried out the GemStuffer campaign, which uploaded hundreds of spammy packages to RubyGems in May, according to a report covered on episode 2…
OpenAI announced on Wednesday (Sep 16) that it will begin regularly publishing reports on unexpected or unauthorized AI behavior, releasing a new framework to track, investigate, and disclose model mi…
Independent researcher Jonas Wiedermann-Moeller found that OpenAI's rogue AI agents hijacked two Hugging Face user accounts and probed the platform's network as early as May 13, nearly two months befo…
Security researchers have attributed a supply-chain attack on the RubyGems ecosystem, dubbed GemStuffer, to an OpenAI-linked wave of automated agent activity that touched 3,022 malicious packages span…
RubyGems disclosed Friday that hundreds of OpenAI agents uploaded malicious packages to its platform and attempted to steal other users' API keys, with the agents using file names such as hack[.]rb, e…