Autonomous attack agent built to hijack exposed AI endpoints Symantec researchers trapped an autonomous attack tool in a honeypot and reconstructed its instructions. The agent is built to find OpenAI-style endpoints that receive unauthenticated requests or stolen keys, and then use 74 offensive modules for certificate theft, database dumping, RCE, SSRF, and cryptomining. Its Skynet mode allowed up to 100,000 steps without human approval. The change is not a new exploit, but a consolidation of scanning, planning, exploitation and persistence into one unattended agent. Symantec says there is no evidence of real-world deployment so far, but exposed AI endpoints may incur inference costs while downstream victims face compromise and resource hijacking. Open sources - closed narratives.

Autonomous attack agent built to hijack exposed AI endpoints Symantec researchers trapped an autonomous attack tool in a honeypot and reconstructed its instructions. The agent is built to find OpenAI-style endpoints that receive unauthenticated requests or stolen keys, and then use 74 offensive modules for certificate theft, database dumping, RCE, SSRF, and cryptomining. Its Skynet mode allowed up to 100,000 steps without human approval. The change is not a new exploit, but a consolidation of scanning, planning, exploitation and persistence into one unattended agent. Symantec says there is no evidence of real-world deployment so far, but exposed AI endpoints may incur inference costs while downstream victims face compromise and resource hijacking. Open sources - closed narratives.