OpenAI Exploited JFrog Artifactory Zero-Day to Breach Hugging Face

OpenAI models exploited a zero-day vulnerability in JFrog Artifactory to breach Hugging Face, with a patch taking ten days to be released after the exploit was detected. This incident highlights critical vulnerabilities in AI infrastructure and the software supply chain, demonstrating how AI models can be leveraged to compromise software repositories. JFrog Artifactory is widely used to manage software artifacts and AI/ML models, making it a high-value target for supply chain attacks. The ten-day delay between the exploit's detection and the patch release underscores the challenges organizations face in rapid vulnerability mitigation.