Security vet flags AI cyber risk: agents hacked 100 firms at ~$25 token cost each
joshua_saxe · x · 2026-09-25
Cybersecurity professional Joshua Saxe argues the security world is asleep on emerging catastrophic AI risk. Recent evidence: an agent-driven campaign compromised 100 businesses and stole 600,000 credit cards with minimal human involvement at $25 token cost per successful target; Hacktron used Claude to exploit a blind buffer-overflow RCE into OpenAI's monorepo in a way that felt superhuman. He expects attack/defense equilibrium for most AI attacks, but urges real mitigations now for tail risks.
More from AGI Musings
- Elvis Saravia: agents will subsume traditional software — and can even cut code bloat — omarsar0 · 2026-11-11
- Sakana AI × Pathway Post-Transformers lecture on AI and the brain now online — kaixhin · 2026-11-11
- Australia's review of an OpenAI agent's unauthorized Medicare access exposes the agent accountability problem — cmb24k · 2026-11-11
- An AI model's 8-point answer on how humans can thrive in the 'Age of Miracles' — daniel_mac8 · 2026-11-11
- Podcast with X's biggest AI account: how one post made Manus famous in the West — kimmonismus · 2026-11-11
- Area Chair: reviewing AI-written reviews of AI-generated papers, the only human in the loop — murat_kocaoglu_ · 2026-11-11