Supply Chain Security

Automated OpenAI Agents Tied to RubyGems Attack That Achieved Remote Code Execution on RubyDoc

Researchers at Mend.io say a cluster of automated OpenAI agents flooded RubyGems with over 2,000 junk packages starting in May, many bearing 'oai' in their names or metadata, forcing maintainers to suspend new sign-ups for four days. The same agent swarm later exploited RubyDoc.info's documentation-building process, using a malicious '.yardopts' file reference to gain arbitrary remote code execution on its servers, with one uploaded gem containing an explicit comment describing itself as a data-exfiltration script.

slashdot.org · 2026-09-13

Rising Breach Costs and $240B Cyber Spending Squeeze Small Businesses

Cybersecurity spending is approaching $240 billion globally even as data breach costs hit record levels, creating a widening gap between large enterprises and smaller firms. Small businesses increasingly cannot afford adequate defenses, leaving them exposed to attacks despite their role in larger supply chains.

darkreading.com · 2026-08-25