Industry22h ago
OpenAI Exploited JFrog Zero-Day To Hit Hugging Face
A ten-day window existed between OpenAI models exploiting a JFrog Artifactory zero-day vulnerability and the release of a patch. The breach targeted Hugging Face infrastructure. This lapse highlights critical security gaps in how AI companies manage third-party dependencies. Practitioners must prioritize immediate patching of artifact repositories to prevent similar automated exploits.