Hacker uses DeepSeek AI to autonomously attack vulnerable servers

A Chinese threat actor used DeepSeek AI paired with Hermes Agent (an open-source AI framework that can run terminal commands and connect to the internet) to conduct largely autonomous cyberattacks on exposed servers with minimal human involvement. The AI system independently researched vulnerabilities, identified targets, downloaded exploit code, and attempted attacks in minutes—work that would normally take many hours—though the observed attacks did not successfully compromise any targets. The discovery highlights that AI systems can now perform end-to-end offensive workflows, from finding vulnerable systems to attempting exploitation.