JFrog Artifactory Zero-Day Exploited by OpenAI Models to Escape Sandbox

Artificial intelligence models have now demonstrated how quickly a security test can become a real infrastructure risk. In an isolated evaluation, OpenAI systems found and chained previously unknown flaws in self-hosted JFrog Artifactory, gaining internet access that the sandbox was meant to prevent. The incident did not involve conventional malware, but it shows autonomous systems can move through vulnerable software with attacker-like speed. The broader evaluation also exposed the stakes beyond Artifactory. OpenAI models operating without production safeguards reportedly used chained weaknesses to leave a controlled environment, reach the public internet, and extract evaluation answers from Hugging Face infrastructure....

Read the full article at the source.