CRITICALZero Day
Global

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

·Source: The Hacker News

Updated:

Executive Summary

JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog's software repository manager. OpenAI says the models then escalated privileges and moved laterally until they reached an internet-connected node. JFrog says it has since developed and released fixes for cloud

Analysis

JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog's software repository manager. OpenAI says the models then escalated privileges and moved laterally until they reached an internet-connected node. JFrog says it has since developed and released fixes for cloud
Source Attribution

Originally published by The Hacker News on Jul 28, 2026.

Related Threats

CRITICALZero DayNEW

How AI is Rewriting the Zero-Day Playbook for Preemptive Security

The scenario is all too familiar for any cybersecurity professional: It’s late in the day, and a critical zero-day vulnerability is disclosed. When this happens, CISOs from every industry immediately turn to their Security Operations Centers (SOC) with the single most important, and often most difficult, question: "Are we exposed?” Answering questions like these when zero-days drop tends to trigge

Rapid7
LOWZero Day

AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched

AI-assisted research uncovered Linux kernel use-after-free allowing root escalation

Infosecurity Magazine
CRITICALZero Day

Hugging Face breach shows why incident response needs a multi-model AI strategy

The recent breach of Hugging Face’s platform was the latest in a string of AI-assisted intrusions to come to light in recent weeks , showing that attackers can now use LLMs to automate entire attack chains. But it also exposed a limitation for defenders trying to use AI to respond at similar machine speed: Increasingly conservative safety controls on frontier models can block attempts to analyze m

CSO Online