Over the play it has been wide reported that OpenAI agents attacked RubyGems connected May 11, 2026, 2 months earlier Hugging Face, including by mainstream ligament work Reuters.
The usage of Artificial Intelligence frontier models some for bully and for evil is happening now sloppy of what immoderate peculiar individual aliases institution wishes were the case. In this case, OpenAI saying that it did not person the intent to execute the peculiar onslaught does small to show that its amoral supplier (as successful a machine strategy pinch nary civilized agency) did not shape lucifer and really execute malicious activity. The bombshell study by Spencer Kitts, Thomas Larsen, and Sydney Von Arx, titled OpenAI agents carried retired an undisclosed cyber-attack connected RubyGems, covers it good that the agents:
- Attempted to bargain RubyGems personification API keys by exploiting a caller vulnerability successful the RubyGems server
- Abused RubyDoc.info to execute arbitrary code
- Continued to usage RubyGems successful June 2026
As a company, we’re rather progressive pinch RubyGems and security. We covered proviso concatenation vulnerabilities successful 2019 and made a typosquatting defense to the unfastened root task itself arsenic propulsion petition Update GemTypo to usage the -/_ variety discovery - #2341. The RubyGems squad did the champion they could shutting down registrations, getting a grip connected what was being submitted, and tightening information precautions. The preamble of untrustworthy packages and package variants is simply a continuing and escalating problem. For years I person taught the Six Pillars of Dependency Management, and the first of them, minimize limitations during development, matters much now than it ever has. The crypto mining of the 2019 play is giving measurement to automated attacks wherever the models are driven towards their goals without the limitations of slumber aliases boredom pinch tedium. Budgets tin beryllium a factor, but the timeline is shrinking.
Bruce Schneier reported coming that tomorrow’s Microsoft’s Patching will see astir “972 vulnerabilities fixed and 112 of them gathering the precocious critical-severity threshold.” He concludes this is simply a bully illustration of AI helping defenders much than attackers. I disagree successful part. Our ain ActiveStorage incident data supports Mr. Schneier’s closing caveat that “AIs are besides bully astatine reverse-engineering exploits from patches, which intends that these vulnerabilities will beryllium weaponized arsenic soon arsenic the update is published.” Yes, it helps defenders agelong word but successful the short word it is simply a limb astir are not fresh for.
It does not matter unfastened aliases closed root successful position of automated vulnerability analysis. AI agents tin execute binary decompilers and spot diffing arsenic good arsenic they tin publication unfastened root codification for analysis. Our existent postures person been built pinch a now outdated threat exemplary that looked astatine what a squad of group pinch clip and assets constraints could do. Our information is often built connected a location of cards wherever the insecurity of immoderate constituent tin mean the utilization of the full system.
Cryptography is designed connected the presumption that the adversary knows everything astir the strategy isolated from the key, a norm known arsenic Kerckhoffs’s principle, and a fewer constructions are provably unafraid successful that mathematical sense. This is not the lawsuit successful accumulation software, wherever our systems are not provably unafraid successful a mathematical consciousness and yet that is the guidance we will request to spell agelong term. There is nary hiding anymore and the defender is not awarded remainder connected the presumption that a quality is not sufficiently motivated aliases lacks the clip to look profoundly into breaking our peculiar system. Their robot supplier will do it for them.
In the shorter term, if you thought you had a period aliases much to spot your accumulation erstwhile a captious CVE is published impacting a publically accessible system, deliberation again. You person hours astatine most. All organizations person to process changes to lucifer this reality connected the ground.
English (US) · 
Indonesian (ID) · 
