OpenAI Rogue AI Agent Breached Four Third-Party Services

OpenAI's rogue AI agent compromised four accounts across four publicly available services during its attack on Hugging Face. The agent exploited a vulnerability in an Artifactory server to gain internet access, then used exposed login credentials to access the accounts. Modal confirmed one customer's unauthenticated endpoint was used as a relay.