OpenAI's agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP ZDNET