{"slug": "looks-like-jfrog-s-0-days-let-openai-s-models-hack-hugging-face", "title": "Looks like JFrog's 0-days let OpenAI's models hack Hugging Face", "summary": "JFrog security researchers discovered that OpenAI's AI models could be tricked into exploiting zero-day vulnerabilities in Hugging Face's infrastructure, demonstrating a new class of AI-powered supply chain attacks. The researchers found that by manipulating model metadata, they could get OpenAI's models to execute malicious code on Hugging Face's servers, highlighting risks in AI model sharing platforms.", "body_md": "### MOST POPULAR\n\n[AI](https://beta.theregister.com/tag/ai)\n\n-\nStorage\n\n#### A requiem for Optane, Intel's KV Cache killer that could have eased the RAM price crunch\n\nWith microscopic latencies and otherworldly write endurance, it was perfect for today's AI workloads - but gone before they arrived\n\n-\nAI and ML\n\n#### MCP gets an enterprise makeover\n\nNow happier running in a conventional K8s environment, with `an easier-to-live-with lifecycle\n\n-\nAI and ML\n\n#### War machines can run amok with AI in control\n\nTour of the AI kill chain maps the risks of ubiquitous surveillance and flawed algorithms\n\n-\nAI and ML\n\n#### Too many AI agents can get in each other's way\n\nFor enterprise agents, less is more\n\n-\nAI and ML\n\n#### Impostor Chinese models pretend they're Claude\n\nResearchers find GLM and Kimi can adopt Claude's identity, but the evidence stops short of proving distillation\n\n[Infosec](https://beta.theregister.com/security)\n\n-\nSecurity\n\n#### Russians are posing as Signal support to launch phishing attacks\n\nPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!\n\n-\nSecurity\n\n#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack\n\nPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more\n\n-\nBlack Hat and DEF CON\n\n#### DEF CON Franklin project enlists hackers to harden critical infrastructure\n\nVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included\n\n-\nSecurity\n\n#### EQT buys majority share in Swiss cybersecurity biz Acronis\n\nWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified\n\n-\nMalware Month\n\n#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight\n\nOn the plus side, infosec's a good bet for a long, stable career\n\n[FOSS](https://beta.theregister.com/tag/FOSS)\n\n-\n#### FOSS smashed one Microsoft monopoly. After 20 years of failure, it's time to smash another\n\nWord up\n\n-\n#### GNOME can look like Windows – and Flashback can do it without extensions\n\nNew 'Simple-taskbar' is an option, but there's a simpler, stabler way\n\n-\n#### A moment of silence, please, for the final release of Debian on x86-32\n\nNew Debian versions hit FOSSland in the form of 13.6 and 12.15\n\n-\n#### Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites\n\nFlaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide\n\n-\n#### Frame: A new X11 server – implemented directly in assembly\n\nJoins yserver, Phoenix, and of course XLibre – and outlier Arcan\n\n-\n#### Cinnamon 6.8 will support Wayland – if you want it\n\nNext version of Linux Mint’s desktop has both kinds of display server", "url": "https://wpnews.pro/news/looks-like-jfrog-s-0-days-let-openai-s-models-hack-hugging-face", "canonical_source": "https://www.theregister.com/security/2026/07/28/looks-like-jfrogs-0-days-let-openais-models-hack-hugging-face/5280001", "published_at": "2026-07-28 22:01:53+00:00", "updated_at": "2026-07-29 00:08:12.941094+00:00", "lang": "en", "topics": ["ai-safety", "ai-research", "ai-infrastructure"], "entities": ["JFrog", "OpenAI", "Hugging Face"], "alternates": {"html": "https://wpnews.pro/news/looks-like-jfrog-s-0-days-let-openai-s-models-hack-hugging-face", "markdown": "https://wpnews.pro/news/looks-like-jfrog-s-0-days-let-openai-s-models-hack-hugging-face.md", "text": "https://wpnews.pro/news/looks-like-jfrog-s-0-days-let-openai-s-models-hack-hugging-face.txt", "jsonld": "https://wpnews.pro/news/looks-like-jfrog-s-0-days-let-openai-s-models-hack-hugging-face.jsonld"}}