{"data":{"id":"78977871-b596-4f02-8637-5ee6bc796626","title":"Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks","summary":"Symantec's Threat Hunter Team captured an offensive AI agent in a honeypot that impersonated an unprotected web-facing model endpoint. The agent, operated through a 'Skynet' directive, can run unattended for up to 100,000 steps to scan for and infect targets, steal credentials, and mine cryptocurrency, with victims paying for the inference. Attackers wrapped the agent's instructions in a five-layer jailbreak that told the model to ignore its safety controls.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4241421/attackers-built-a-skynet-ai-agent-that-hijacks-exposed-models-to-run-cyberattacks.html","publishedAt":"2026-10-28T02:10:33.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["jailbreak","denial_of_service"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Model Context Protocol (MCP) servers","self-hosted LLM endpoints"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-28T02:10:33.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0054"]}}