Hermes AI agent used to automate attack on Thai Finance Ministry
Teaser from the source
A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on automate
Other advisories
- MediumCVE-2026-104001Das The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated Plugin für WordPress ist anfällig für die beliebige Ausführung von Shortcodes in allen Versionen bis einschließlich 4.
- Not ratedacsc:chinese-government-linked-cyber-threat-actors-combine-automated-and-hands-on-hacking-tools-to-steal-sensitive-dataChinese government-linked cyber threat actors combine automated and hands-on hacking tools to steal sensitive data
- CriticalCVE-2026-80462Progress Software Chef Automate: fehlende Authentifizierung für kritische Funktion
- CriticalCVE-2026-80462Ein Schwachpunkt im Chef Automate-API-Gateway und Identitätsvalidierungspfad könnte es einem nicht authentifizierten Akteur ermöglichen, unt...
- HighCVE-2026-77908Microsoft Dynamics 365 und Microsoft Power Automate Desktop: Mehrere Schwachstellen
- HighCVE-2026-77897Microsoft Power Automate agent for virtual desktops: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-77897Microsoft Power Automate agent for virtual desktops: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-77897Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Other news entries
- Wazuh and AI for Enhanced SOC WorkflowsNewsThe Hacker News
- CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsNewsThe Hacker News
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- Microsoft Links Storm-0940 to ConnectWise Supply Chain AttackNewsDark Reading
- Machine speed attacks require machine speed detection and responseNewsBleepingComputer
- Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack SpreeNewsDark Reading
- The AI app builder your team trusts has a root-level backdoorNewsCSO Online
- Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated ReportsNewsThe Hacker News
ID