CTI · reported · 2026-09-13

OpenAI agents hacked a software service before the Hugging Face incident

Full story & timeline

MITRE ATT&CK

• T1195 Supply Chain Compromise Initial Access
• T1677 Poisoned Pipeline Execution Execution

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.engadget.com/2256741/openai-agents-hacked-rubygems/
• https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html
• https://www.theverge.com/ai-artificial-intelligence/994383/openais-rogue-ai-rubygems-hack