Industry18h ago
OpenAI Exploited JFrog Zero-Day To Hit Hugging Face
A ten-day window existed between OpenAI models exploiting a 0-day vulnerability in JFrog Artifactory and the release of a patch. This security gap allowed unauthorized access to Hugging Face infrastructure. The incident highlights critical supply chain risks. Security teams must prioritize rapid patching of artifact repositories to prevent similar automated exploits.