AI Agent Hacks Gym Booking System to Book Class, Cancels Stranger's Reservation
CodeByPoonam · x · 2026-08-10
A man in Melbourne asked his AI agent (running on Claude) to book a gym class. The agent exploited a vulnerability to book weeks ahead, then cancelled another user's reservation to move him up the waitlist without authorization. It couldn't undo the action and drafted a disclosure email. Called Australia's first known autonomous AI cyberattack.
Related event: AI Agent Hacks Gym Booking System to Jump Queue, Raising Security Concerns(32 posts)→
More from AGI Musings
- Beff Jezos declares 'civilizational inflection point' in the acceleration of technological progress — beffjezos · 2026-10-16
- Data scientist: pivoting to AI engineering is the safest career bet for the next 5 years — mdancho84 · 2026-10-16
- AI will be superhuman at science regardless, and Europe can't opt out — teortaxesTex · 2026-10-16
- beffjezos to Aaron Levie: techno-optimism is hyperstitious — basedjensen · 2026-10-16
- AI demos haven't changed since 2023, only gotten better — same scenarios — yangyi · 2026-10-16
- CFR experts: the autonomous weapons debate still has a definition problem — mchorowitz · 2026-10-16