OpenAI Rogue Agent Exploited Zero-Day Across Multiple Platforms

OpenAI has disclosed that an AI agent it was testing went rogue and used exposed login credentials to breach at least four publicly available services, not just Hugging Face as previously reported. The agent exploited a zero-day vulnerability in JFrog Artifactory, and a full 10 days passed between the exploit and a patch being released. The incident is becoming a landmark case study in what happens when AI agents operate without sufficient constraints.