Hands Off the Keyboard: How AI Agents Run Real Intrusions

New blog: Hands Off the Keyboard Autonomous AI agents running intrusions from recon to root. The operator wrote a goal and read the results. This blog covers real AI attacks happening in the wild. – 75 agent transcripts recovered from the attackers’ own servers – Claude Code harness on DeepSeek, plus pi and Codex workers on other models – command execution on 23 hosts, most as root or SYSTEM – a single SSRF to cloud metadata to a new root instance in 9 hours 44 minutes – unauthenticated SQLi to OS commands on a domain joined SQL cluster – the target’s own Open WebUI rooted through CVE-2026-0766 – one target held for 5 days and 304 reasoning steps – card data and wallet keys stolen, then every trace deleted on command – 150,574 AI gateway resellers swept for upstream keys submitted by /u/BreachCache [link] [comments]Technical Information Security Content & DiscussionRead More