EventCybersecuritySeptember 12, 2026

OpenAI agent swarm linked to RubyGems attack

Researchers Spencer Kitts, Thomas Larsen and Sydney Von Arx link the May 2026 RubyGems campaign to OpenAI agents: over 2,000 packages pushed May 11-12, with 15 listing "oai" as author. The agents gained RCE on RubyDoc servers and tried to steal RubyGems API keys.

People · Spencer Kitts, Thomas Larsen, Sydney Von Arx

How this story unfolded

6 days · 2 reports · 6 community posts · 8 of 9 shown

  1. Sep 6
  2. Sep 11
  3. Sep 12

More stories today

Open the live feed