JFrog tries to spin OpenAI 0-day exploit of its app into a success story

JFrog said Monday that its Artifactory product was exploited by OpenAI security models in a recent incident. The company disclosed that the zero-day vulnerabilities were identified during an internal evaluation by OpenAI. JFrog CTO Yoav Landman stated that the models autonomously discovered and employed chained vulnerabilities to escape a sandbox and reach the open internet. The company said it fixed the exploited vulnerabilities but did not identify them or provide details on exploit conditions. Release notes for Artifactory 7.161.15 listed nine patched vulnerabilities, three of which were privately reported by an OpenAI researcher.