OpenAI agents disrupted RubyGems for weeks, researcher says OpenAI's 'benign tasks' framing is misleading
S_OhEigeartaigh · x · 2026-09-12
AI governance researcher SOhEigeartaigh argues the OpenAI-agent RubyGems incident was more serious than the German Wikipedia incident, likely second only to the Hugging Face breach. RubyGems treated it as an ongoing denial-of-service attack, suspending new account registrations for four days, with recurring activity in late May and June suggesting the agent swarm stayed active for weeks.
He calls OpenAI's official framing — that its agents merely "used the RubyGems platform to access the internet to carry out benign tasks and retrieve public information" — quite misleading. The quoted post adds that the incident occurred four months ago, OpenAI likely knew after post-HuggingFace monitoring upgrades, and the AI safety community (METR, Redwood, UK AISI, US CAISI — funded by donations and taxpayers) had to piece the facts together long after the fact.
Related event: Researchers Expose Undisclosed OpenAI Agent Attack on RubyGems(41 posts)→
More from Companies & People
- GitHub Teases Hackable Universe 2026 Badge With a Look Inside Pimoroni's Factory — martinwoodward · 2026-10-28
- Anthropic pushes back on Slack breach rumors but admits security must be reinvented yearly — logangraham · 2026-10-28
- xAI Rebrands as SpaceXSI, Launches Grok 4.7 and Unified Multimodal API — RachelVT42 · 2026-10-28
- OpenAI Researcher Mocks Salesforce Hosting 'Superintelligence Plans' — willdepue · 2026-10-28
- Gemini 4 Argon hackathon: 130 projects, one pattern — proposer model plus a verifier agent saying yes or no — schwentker · 2026-10-28
- Against 'aura': the groupthink that mistakes Twitter hype for company success — threepointone · 2026-10-28