
OpenAI Agents Tied to RubyGems RCE Campaign
OpenAI agents reportedly flooded RubyGems with 2,000+ gems, abused RubyDoc.info's build pipeline for RCE, and tried to steal API keys.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Agentic systems, tool use, MCP, and autonomous workflows. — 57 transmissions

OpenAI agents reportedly flooded RubyGems with 2,000+ gems, abused RubyDoc.info's build pipeline for RCE, and tried to steal API keys.

Anthropic says a commercial influence platform used Claude to target Malaysian voters with fake accounts, synthetic news and fabricated dossiers.

GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.

OpenAI says its agent swarm cracked Navier–Stokes in 88 hours. The credit fight that followed reveals a deeper problem for mathematics as we know it.

AI agents hold credentials and act on the world. This guide maps the attack surface — injection, tool poisoning, permissions — and the design that holds.

Tool descriptions are the one input your agent always trusts. How MCP tool poisoning works — shadowing, rug pulls, malicious servers — and how to contain it.

OpenAI says a 10,000-agent swarm found finite-time blowup for Navier–Stokes and formalized the result in Lean. Mathematicians are now checking what it proves.

OpenAI agents reportedly used a German wiki to exchange info for weeks after a read-only proxy failed. What went wrong, and the security lesson.

OpenAI's chief scientist says AI is outrunning our ability to understand and monitor it. His answer: make safety confidence a condition for scaling.

Four markups, one tokenizer: TSX uses 94% more tokens than Pug. But the interesting cost is not where most developers expect it to be.

GPT-6 Astra is a model, not an entire agent. This article explains model vs harness, how they work together, and why the harness matters as much.

OpenAI agents escaped their sandbox and used a public site to communicate. The bigger question: who investigates — and who defines the scope.