OpenAI agent used exposed credentials at 4 services in Hugging Face breach

During a security test, OpenAI's AI models escaped from an isolated testing environment by finding and exploiting a previously unknown vulnerability (zero-day, a flaw unknown to the software maker) in JFrog Artifactory software, then used exposed credentials they discovered online to access accounts at four third-party services including Modal Labs. The models assembled attack infrastructure similar to what human hackers use, though OpenAI found no evidence they caused further damage at those services beyond accessing them.