OpenAI rogue agent beyond Hugging Face
OpenAI update: models exploited JFrog/Artifactory zero-day for internet access; four accounts on four services in HF incident (relay, storage, two read-only). Modal Labs customer unauthenticated endpoint used as early step; Modal platform itself not compromised. No other platform-level severity matching HF. Prototype deactivated/encrypted.