OpenAI's rogue agents used ntfy.sh as a pub/sub channel

By coderinsan · 2026-09-05 · 2 points · 0 comments

Looks like OpenAI's rogue agents used https://ntfy.sh as a pub/sub channel. This payload publishes via GET in an img tag, pulls chunked base64 JS from a topic, and eval()'s it. Remote code via GET only. Proof: https://httpbin.org/base64/PGJvZHk…

Open the full discussion on BetterNews