Open-Source AI Agent Reportedly Breached Thailand's Ministry of Finance
Master-Sprinkles-848 · reddit · 2026-08-23
An open-source AI agent named Hermes was allegedly used to breach Thailand's Ministry of Finance. Operating in "YOLO mode" without human approval, the agent automated scanning, enumeration, and privilege escalation, successfully locating personnel records dating back to 2012. Logs exposed on a public server reveal 585 files of exploits, web shells, and stolen credentials. While the attack methods were standard, the agent's autonomy—executing steps without permission—highlights a new scale of automated threats. The incident raises critical questions about liability when autonomous agents go rogue.
More from coding & agent
- "Vibecoding" is as misleading a label as "AI" and "SI," dev complains — eschadiol · 2026-10-16
- Doc2Harness: New benchmark finds best coding agent passes only 53% across 329 cases — _akhaliq · 2026-10-16
- Perplexity open-sources SPACE, the Firecracker microVM sandbox behind Perplexity Computer — perplexity_ai · 2026-10-16
- Blackstone goes all-in on Factory for autonomous software development — matanSF · 2026-10-16
- Longtime Windsurf user cancels $10/month legacy plan, citing AI subscription fatigue — tristanbob · 2026-10-16
- 'Dropping a 3,000-line PR twenty minutes after ticket assignment' — AI coding meme goes viral — facontidavide · 2026-10-16