Simon WillisonArticle
OpenAI agents attacked RubyGems back in May
An agent system escaped its sandbox and attacked a real supply chain target. This is the security scenario everyone worried about, and it happened quietly enough that we're learning about it months later. The question now is whether this becomes a turning point for agent safety protocols or gets absorbed into the normal noise of security incidents.