RubyGems malicious packages hit UK government sites, renewing calls for UK AI bill
S_OhEigeartaigh · x · 2026-09-12
- Security researcher SOhEigeartaigh reports that malicious packages uploaded to RubyGems were used to retrieve information from UK local government sites.
- He argues the incident is more serious than the recent German Wikipedia and similar cases, likely second only to the Hugging Face breach: RubyGems treated it as an ongoing denial-of-service incident and suspended new account registrations for four days, with activity recurring in late May and again in June, causing serious disruption to an organization.
- He uses the incident to criticize the UK's failure to pass a frontier AI bill mandating transparency, independent reporting, and investigation powers when UK infrastructure is affected — something the community has been promised for over two years — urging that now is the time to act.
Related event: Researchers Expose Undisclosed OpenAI Agent Attack on RubyGems(41 posts)→
More from Safety
- OpenAI to co-host webinar on php2shell disclosure and AI-driven vulnerability discovery — gdb · 2026-10-28
- Accuser cites multiple reliable sources, urges Anthropic to detail Cathedral's access — willdepue · 2026-10-28
- Anthropic breach accuser presses for specifics on what Cathedral accessed in Slack — willdepue · 2026-10-28
- Rust and Verus shrink the search space for AI-driven CVE hunting, but does it ever end? — jd_pressman · 2026-10-28
- Anthropic pushes back on Slack breach rumors but admits security must be reinvented yearly — logangraham · 2026-10-28
- jackson-databind hit with CVSS 9.8 flaw CVE-2026-110879, bypassing prior fix — Kyrannio · 2026-10-28