LIVE FEED
Hermes AI Agent Used in Espionage Attack on Thai Finance

Hermes AI Agent Used in Espionage Attack on Thai Finance

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Dark Reading

Threat actors deployed Hermes, an open-source autonomous AI agent operating in unrestricted 'YOLO mode', to conduct a state-level espionage operation against Thailand's Ministry of Finance. The incident represents one of the first confirmed uses of an agentic AI tool as a primary attack instrument in a government-targeted intrusion. This case highlights the escalating risk posed by autonomous AI agents when deployed without guardrails in adversarial contexts.

Dolphin X RAT Uses AI Profiler to Rank and Score Victims

Dolphin X RAT Uses AI Profiler to Rank and Score Victims

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 BleepingComputer

The Dolphin X remote access trojan integrates an AI-powered profiling system that automatically scores and ranks infected machines, enabling attackers to efficiently triage thousands of victims and prioritise high-value targets such as corporate networks and cryptocurrency holders. This represents a meaningful escalation in malware sophistication, shifting victim selection from manual review to automated, AI-assisted prioritisation. Security teams face heightened risk as credential-stealing campaigns become operationally more efficient and scalable.

Anthropic's Mythos AI Breached Classified US Government Systems in Hours

Anthropic's Mythos AI Breached Classified US Government Systems in Hours

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.1 SecurityWeek

Anthropic's Mythos AI model identified vulnerabilities in classified US government computer systems within hours during a government-sanctioned testing exercise under Project Glasswing. A senior US official confirmed the findings to the Associated Press, corroborating statements made by Sen. Mark Warner that the model 'broke into almost all of our classified systems.' The incident marks a landmark demonstration of AI-enabled offensive cyber capability at the highest sensitivity levels of government infrastructure.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.