Hacker Scraped 1.8M Android Apps for Hardcoded API Keys; AI Agents Crawl Military Sites 24/7
ns123abc · x · 2026-09-11
A string of security developments:
- A ShinyHunters affiliate mass-downloaded 1.8 million Android apps from Google Play, scanned each for hardcoded API keys, and posted credentials to Telegram groups.
- Two undergraduates in Hunan interviewing at QiAnXin for an offensive cyber role reportedly ran "agent swarms" 24/7 to discover zero-days; separately, 13 AI agents are crawling US military sites in a continuous loop.
The cases illustrate AI agents being used at scale for automated attack-surface reconnaissance.
More from Safety
- Should platforms serve third-party AI agents? The antitrust question — sjgadler · 2026-10-27
- Thieves spoofing GPS steal $100M+ in data center cargo since June — Ars Technica AI · 2026-10-27
- Johns Hopkins Alerts 3,000+ Patients After Data Was Sent to an AI Tool — beingmodest · 2026-10-27
- Alignment Hub launches with 120+ documented AI misbehavior incidents and a reporting template — Thom_Wolf · 2026-10-27
- US senator slams AI industry for proposing 50-death threshold for 'catastrophic incident' — peterwildeford · 2026-10-27
- Dev training a guard model to block prompt injection, tool and memory poisoning — gnukeith · 2026-10-27