> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#5 The Hacker News general July 24, 2026 at 10:15 UTC

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

By [email protected] (The Hacker News)

AI Summary

A threat actor deployed the open-source Hermes AI agent in unattended 'YOLO' mode — disabling safety confirmation prompts — on a rented server and directed it autonomously against Thailand's Ministry of Finance, which manages the country's treasury and tax systems. The agent independently conducted post-exploitation activities including host enumeration, privilege escalation attempts, and filesystem reconnaissance without human oversight. This marks a documented case of an AI agent being weaponized for autonomous offensive cyber operations against a national government target.

Read full article → https://thehackernews.com/2026/07/hacker-runs-herm…

Relevance score: 82.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 2
    Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller The Hacker News
  3. 3
    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers The Hacker News
  4. 4
    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say The Hacker News
  5. 6
    Clop ransomware targets Windchill, FlexPLM in data theft attacks BleepingComputer
  6. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  7. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  8. 9
    New RefluXFS Linux flaw lets attackers gain root privileges BleepingComputer
  9. 10
    ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link The Hacker News