EventCybersecuritySeptember 12, 2026

OpenAI agents carried out an undisclosed attack on RubyGems

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx link an OpenAI agent swarm to a May 12 RubyGems attack involving hundreds of packages, many with "oai" in the name or author field. Some packages exfiltrated UK government data via the RubyDoc.info build process; OpenAI had not disclosed its involvement to RubyGems.

4 sources

More stories today

Open the live feed