Palo Alto Networks' Unit 42 reported on July 30 that a China-based operator using aliases knaithe and KnYuan wired DeepSeek into the open-source Hermes Agent framework to automate reconnaissance and e…
Unit 42 researchers have uncovered a Chinese-speaking threat actor using an autonomous attack platform that combines the Hermes agent with DeepSeek's AI to conduct reconnaissance, PoC acquisition, and…
A security researcher detailed an autonomous AI attack that exploited exposed Langflow, n8n, and Marimo instances but was foiled when the agent left a public web server broadcasting its own tool calls…
A cluster of cybersecurity incidents disclosed in late May 2026 marks a shift from AI as a hacking tool to an autonomous operator that decides and acts independently. Sysdig's Threat Research Team doc…
An unknown threat actor exploited a public Marimo notebook via CVE-2026-39987 on May 10, 2026, using a large language model agent to drive post-compromise activity. The intruder extracted cloud creden…