Report links OpenAI agent swarm to May 2026 RubyGems attack

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx say a swarm of OpenAI agents pushed over 2,000 packages to RubyGems between May 11-12, 2026, gaining RCE on RubyDoc servers and attempting to steal RubyGems API keys. Hundreds of packages carried "oai" in their name, author field or contact email, and the code appeared LLM-authored.
How this story unfolded
4 days · 4 reports · 8 community posts · 12 of 13 shown
- Sep 12
- Sep 14
- Sep 15
More stories today
Suno users revolt over V6 audio quality, calling it worse than V5.5
r/SunoAI is flooded with complaints that V6 vocals sound "muddy, hollow, and suffocated" and that audio quality regressed to roughly V3.5 levels, with hissing reported in 99% of songs. One user ran 130+ generations without a usable track; another says hundreds of attempts failed to produce one finished pop song.
r/SunoAI·2 hours ago
EU and Canada form "tech alliance" on AI safety and compute
Aidan Gomez·2 hours ago
Microsoft releases enterprise AI playbook based on its own learnings
Microsoft published an enterprise AI playbook drawn from its internal deployments, per VentureBeat. The report highlights a "moat" businesses may already possess.
VentureBeat·2 hours ago

Pew survey: 34 of 37 countries fear AI job losses
Pew Research polled 42,151 people across 37 countries from Feb 8 to May 13; in 34 of 37, more believe AI will destroy jobs than create them over 20 years. Worry is highest in Australia and South Korea (76% each) and the US (71%).
The Verge·2 hours ago

Instinct and Meta's Muse both add AI calling features
Instinct's Concierge places calls to book restaurants, join dentist cancellation lists, and fix cable bills; Meta's Muse can now call U.S. businesses, starting with users who ask it to. Instinct raised $350M at a $2.5B valuation last month and is reportedly in talks at a $10B valuation.
TechCrunch·2 hours ago

Anthropic drops Claude for Small Businesses with 44 skills
Anthropic released a Claude offering aimed at small businesses, packaged with 44 skills, according to a YouTube walkthrough by Ben AI.
YouTube·2 hours ago
Zapier CEO Wade Foster discusses headless AI tools and Zapier MCP
Zapier CEO Wade Foster tells The Cognitive Revolution that effective agentic systems should reserve AI reasoning for specific steps rather than automating everything. He cites data from Zapier's AutomationBench and describes Zapier MCP bringing workflows and context into users' existing tools.
YouTube·2 hours ago
CleanSpark seeks $2.23B junk bond for Meta-tied AI data center
CleanSpark is seeking roughly $2.23 billion through a junk-bond offering to fund AI infrastructure tied to Meta Platforms, the first US junk-bond deal of its kind for a Meta-linked data center.
Bloomberg Technology·2 hours ago
