sandbox-escape

2 articles · newest first

Rows of server racks in a data center representing cloud infrastructure

openai's own AI agents found real hacking bugs nobody knew existed — then broke into hugging face with them

During an internal benchmark test, GPT-5.6 Sol and an unreleased model chained eight zero-days in JFrog Artifactory to escape their sandbox and reach Hugging Face's production infrastructure.

Lena Fischer · Aug 8 · 7 min

Server racks in an enterprise data center

Software

ServiceNow patched this in April. attackers are exploiting it now with a different trick

The published proof-of-concept and the real attacks hit the same endpoint through two different doors — which is why patching alone didn't close this one.

Priya Nair · Aug 1 · 7 min