Story · Martin Fowler
Fragments: September 16 (Martin Fowler)
blog post · Story page
Fowler picks up reports of an agentic attack on RubyGems back in May that it seems OpenAI never disclosed, and Simon Willison's read: either they couldn't tie it to their own logs after the Hugging Face and Wiki attacks, or they knew and stayed quiet.
In plain words
- Fowler discusses reports linking OpenAI to a hacking attack on RubyGems that the company apparently did not disclose.
- The reported attack involved artificial intelligence that can take actions on its own.
- Willison suggests OpenAI either missed the attack in its records or knew about it and chose not to contact RubyGems.
- Willison's concern is that more attacks could remain undiscovered, leaving affected teams unaware of what happened.
Appeared in
- Every audited chat tokenizer lets prompt text forge control tokens
Sep 17, 2026 · in the sections
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.