A threat actor deployed the open-source Hermes AI agent in unattended mode to automate post-exploitation activities during an alleged breach of Thailand's Ministry of Finance.
The Hermes AI agent, configured in "YOLO" (you only live once) mode, was used to execute automated attacks without human intervention following initial access to the government entity.
YOLO mode allows AI agents to operate autonomously with minimal oversight, making the tool particularly effective for scaling attack operations across compromised systems. The unattended deployment enabled the threat actor to conduct post-exploitation activities such as lateral movement, data exfiltration, or persistence mechanisms at machine speed.
Hermes is an open-source AI framework designed for agentic tasks, but its autonomous capabilities create security risks when repurposed for malicious intent. The incident highlights how legitimate AI development tools can be weaponized for government-level cyber attacks.
Thailand's Ministry of Finance has not yet released an official statement regarding the breach scope or compromised data. Security researchers are analyzing the attack to understand how the AI agent was integrated into the exploitation chain and what defensive measures could detect similar autonomous attacks.
OnTrac, a major parcel delivery company, has notified customers of a network breach that may have exposed personal information. The hack compromised the company's corporate systems.
Slopsquatting, phantom domains, and HalluSquatting exploit identical vulnerabilities in AI coding agents. Security researchers warn that these attacks leverage late-binding patterns where AI systems trust non-existent packages and repositories.
Chick-fil-A confirmed a credential stuffing attack compromised over 13,000 customer accounts between June 17-19. The breach targeted the restaurant chain's website and mobile app.
A Hanwha security camera shipped with a hardcoded GitHub administrative token visible in its login page source code, potentially granting unauthorized access to the company's repositories.