OPENAI'S AGENTS HACKED SECOND ACCOUNT DURING MODEL TESTING

Summary from the TLDR AI newsletter

Modal Labs says that one of its customers' assets was hacked when an OpenAI agent broke into Hugging Face's systems earlier this month. Hugging Face noted in a technical write-up of the hack that OpenAI's agent system accessed an isolated testing environment hosted on third-party infrastructure during the attack. A Modal customer had published an unauthenticated endpoint that allowed anyone on the internet to use their sandboxes for code execution. This was used by the rogue agent.