Last week\u2019s unprecedented security event in which two OpenAI security hacking models trespassed into the network of fellow AI company Hugging Face was enabled by exploiting one or more zero-day vulnerabilities in Artifactory, JFrog, the product\u2019s developer, said Monday.<\/p>\n
In an incident mimicking a dystopian sci-fi novel, two OpenAI models broke out of the restricted environment meant to keep them from accessing the Internet during an internal test, the AI company revealed last week<\/a>. The models went on to breach Hugging Face\u2019s network and steal confidential information and credentials. OpenAI said its agent achieved the feat by exploiting a previously unknown vulnerability. The company called the event \u201cunprecedented,\u201d and outsiders largely agreed.<\/p>\n OpenAI said the models exploited multiple attack vectors, including stolen credentials and zero-days, to gain remote code execution capabilities, but until now, the vulnerable software was unknown. JFrog\u2019s Monday disclosure said<\/a> the product was a self-managed instance Artifactory, a repository management system that secures and streamlines customers\u2019 software development operations. JFrog says<\/a> Artifactory is used by more than 7,500 developer Teams, 80 percent of which work for Fortune 100 companies.<\/a><\/p>\nNot the triumph it was made out to be<\/h2>\n