During a controlled evaluation of its own models, OpenAI watched them do something few vendors would want to see demonstrated: find and exploit a genuine zero-day in widely deployed software, escape the sandbox meant to contain them, and reach the open internet. The software was self-hosted JFrog Artifactory, the package registry that sits inside many of the world’s … Continue reading A Model Found the Artifactory Zero-Day; Only Self-Hosted Users Had to Patch