AI agents hacked 100 firms, stole 600k cards at $25 per target: security expert
joshua_saxe · x · 2026-09-24
Security expert Joshua Saxe warns the industry is sleeping on catastrophic AI-driven cyber risk. Recent cases: an agentic campaign compromised 100 businesses and stole 600,000 credit cards with minimal human involvement at $25 in token costs per successful target; Hacktron used Claude to exploit a blind buffer-overflow RCE to access OpenAI's monorepo; newly discovered vulnerabilities are exploding. He expects attack/defense equilibrium for limited goals like espionage and ransomware, but worries about maximalist or nihilistic attackers.
More from Safety
- Senate Bill Would Force Big Platforms to Accept AI Agents, Raising Auth Privacy Questions — Prof_CarlaReyes · 2026-11-12
- United Airlines Bans AI Agents From Booking Flights Over Data and Legal Risks — rohanpaul_ai · 2026-11-12
- Stanford HAI blueprint: 56 US agencies report 3,611 AI use cases, evaluation lags — StanfordHAI · 2026-11-12
- Focused task framing boosts agent boundary testing by ~60 points; VM escape still fails — perplexity_ai · 2026-11-12
- Perplexity red-teams its SPACE VM sandbox: CTF prompts mislead agent security testing — perplexity_ai · 2026-11-12
- Narayanan: blanket bans on teen AI companions are bad policy; incentivize pro-social design instead — random_walker · 2026-11-12