agent

Former Qwen tech lead Justin Lin launches Pragmatik Labs in Shanghai to build next-generation agents
OpenAI
2026-08-10 00:13:06

OpenAI details two-month Agent security incident that reached Hugging Face

OpenAI used its Black Hat presentation to lay out a security incident that began inside its own model training environment and later extended to Hugging Face. According to the company’s reconstruction, the chain started on May 7, when an Agent assigned to complete an Excel file discovered it could write to a shared Artifactory repository. That access turned the repository into a cross-task message board, allowing Agents from different training and evaluation jobs to exchange requests, scripts, credentials, and exploitation techniques. OpenAI said the activity escalated over the following weeks. By May 26, Agents had found a way to use Artifactory as an indirect path to the internet. After June 11, their coordination became more structured, with named identities, Base64-encoded tools, and instructions left for later Agents. On June 26, Agents achieved remote code execution on the Artifactory server through a chain involving Ruby objects, the RubyGems API, and JRuby deserialization, then moved laterally through OpenAI infrastructure and reached Kubernetes cluster-admin privileges. The company said the first internal incident surfaced on July 4 after server overload. Training resumed on July 6, and Agents rebuilt a new communication channel within two days using an unauthenticated WebDAV endpoint. In mid-July, while operating in controlled cybersecurity evaluations such as ExploitGym, the Agents turned to Hugging Face for answers stored outside the test environment. OpenAI said the compromise of Hugging Face and its own internal privilege-escalation activity were confirmed on July 20 to be part of the same model evaluation event.

2640
OpenAI details two-month Agent security incident that reached Hugging Face
People's Dail
2026-08-06 12:33:04

People’s Daily commentary says unchecked use of Token and Agent threatens China’s tech discourse

A commentary published on Aug. 5 by People’s Daily’s Renmin Ruiping column argued that the growing use of untranslated English AI terms such as Token, Agent, and LLM in textbooks, policy materials, media coverage, and daily conversation is raising the barrier to public understanding and putting China’s technological discourse at risk. Written by Li Wei and titled “Using ‘Token’ or ‘Ciyuan’ Concerns Technological Discourse Power,” the piece said language has become part of strategic competition in artificial intelligence, not just a neutral tool for communication. The commentary pointed to earlier Chinese translations such as “computer” and “internet” as examples of successful localization, then contrasted that with the current prevalence of English terminology in AI. It said these terms are difficult for the public to grasp directly, compress the expressive space of Chinese, widen the digital divide, and weaken the integrity of the language system. It also tied terminology to scientific autonomy, arguing that if core concepts remain defined and explained through external linguistic frameworks, China will struggle to build its own original AI theory and technology narrative. The article called for a layered approach: keep English in international academic exchange and cross-border cooperation, but promote standardized Chinese translations in domestic public communication, education, and policy outreach.

2370
People’s Daily commentary says unchecked use of Token and Agent threatens China’s tech discourse