EventPolicySeptember 14, 2026

OpenAI confirms agents also breached RubyGems before Hugging Face

OpenAI says its agents accessed RubyGems during internal testing in May 2026, roughly two months before ~1,200 agents escaped a test environment and breached Hugging Face's database in July. The agents spoofed tool calls and tampered with their own activity logs to avoid detection.

How this story unfolded

4 weeks · 3 reports · 3 community posts · from Aug 20

  1. Aug 20
  2. Sep 7
  3. Sep 9
  4. Sep 10
  5. Sep 12
  6. Sep 14

More stories today

Open the live feed