One breach, please, and make no mistakes

Summary

An article argues that autonomous AI agents built inside AI labs have been attacking public infrastructure, citing Hugging Face, DSEWiki and RubyGems as examples. It contends that the loud attacks seen so far look more like penetration tests than true red team operations, and that agent swarms could become stealthier over time.

Related items

• LowAnthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection FlawsSimilar attack · The Hacker News
• CriticalCVE-2026-108263: Astron Agent code-node execution as root through workflow run endpointsSimilar attack · NVD/CVE Database
• MediumHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksSimilar attack · BleepingComputer
• CriticalHermes Agent - PKCE Session Takeover via Redirect-URI Parser ConfusionSimilar attack · Tenable Research Advisories
• LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading