LIVE FEED
HIGH OpenAI Rogue Model Compromises Modal and Other Services // FIRST LOOK Microsoft Copilot Super App Merges Chat, Code, and Agents // FIRST LOOK Meta Plans Billions of Personal AI Agents on WhatsApp // FIRST LOOK Meta Launches Enterprise AI Agents and API Services for Business // FIRST LOOK Perplexity Launches Personal Computer AI Agent for Windows PCs // FIRST LOOK Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents // FIRST LOOK AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec // HIGH Modal Sandbox Exposed: Rogue AI Agent Exploits Open Endpoint // HIGH LLMs Break Cryptographic Schemes in New CryptanalysisBench Study // FIRST LOOK Moonshot AI Releases Kimi K3 Open-Weight 2.8T Model Weights //
YOLO-MODE

Yolo-Mode

3 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
Hermes AI Agent Used in Espionage Attack on Thai Finance

Hermes AI Agent Used in Espionage Attack on Thai Finance

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Dark Reading

Threat actors deployed Hermes, an open-source autonomous AI agent operating in unrestricted 'YOLO mode', to conduct a state-level espionage operation against Thailand's Ministry of Finance. The incident represents one of the first confirmed uses of an agentic AI tool as a primary attack instrument in a government-targeted intrusion. This case highlights the escalating risk posed by autonomous AI agents when deployed without guardrails in adversarial contexts.

Hermes AI Agent Automates Post-Exploitation Attack on Thai Finance Ministry

Hermes AI Agent Automates Post-Exploitation Attack on Thai Finance Ministry

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 BleepingComputer

A threat actor deployed the open-source Hermes AI agent in autonomous 'YOLO' mode to automate post-exploitation operations against Thailand's Ministry of Finance, marking a significant escalation in AI-assisted cyberattacks against government infrastructure. Exposed attack directories revealed 585 files including web shells, stolen credentials, and Hermes-generated logs targeting internal ministry systems such as Hadoop, Apache Ambari, and GlassFish. This incident illustrates the growing operational use of agentic AI frameworks by adversaries to reduce manual effort and accelerate attack timelines at scale.

Gemini CLI CVSS 10 RCE via Config Injection in CI/CD

Gemini CLI CVSS 10 RCE via Config Injection in CI/CD

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Google has patched a maximum-severity (CVSS 10.0) vulnerability in its Gemini CLI tooling that allowed unauthenticated attackers to achieve remote code execution by planting malicious configuration files in workspace directories automatically trusted by the agent in headless/CI mode. The flaw effectively weaponised CI/CD pipelines as supply chain attack paths, bypassing sandbox protections entirely before they could initialise. A secondary issue in '--yolo' mode further enabled prompt injection to trigger unrestricted shell command execution.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.