Hands Off the Keyboard: How AI Agents Run Real Intrusions

Reddit •/u/BreachCache • October 12, 2026

New blog: Hands Off the Keyboard Autonomous AI agents running intrusions from recon to root. The operator wrote a goal and read the results. This blog covers real AI attacks happening in the wild. - 75 agent transcripts recovered from the attackers' own servers - Claude Code harness on DeepSeek, plus pi and Codex workers on other models - command execution on 23 hosts, most as root or SYSTEM - a single SSRF to cloud metadata to a new root instance in 9 hours 44 minutes - unauthenticated SQLi to OS commands on a domain joined SQL cluster - the target's own Open WebUI rooted through CVE-2026-0766 - one target held for 5 days and 304 reasoning steps - card data and wallet keys stolen, then every trace deleted on command - 150,574 AI gateway resellers swept for upstream keys submitted by /u/BreachCache [link] [ ]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Autonomous AI Attacks Using Stolen API Keys on the Rise A criminal forum is promoting an autonomous hacking tool named MONST3R-AI that utilizes stolen OpenAI, Anthropic, and Google API keys, allowing attackers to conduct scans at the expense of the key owners. The tool reportedly has scanned 199 hosts, yielding 1,072 findings, although these numbers are unverified. The increase in discussions about AI agents and jailbreak techniques has surged, with mentions of open-weight models rising sharply. Meanwhile, ransomware discussions have dropped significantly, indicating a shift in focus among cybercriminals. Notably, the tool bypasses safety protocols by leveraging the API keys of unsuspecting victims. Additionally, a blog post detailed real-world AI-driven intrusions, including command executions and data theft. The CVE-2026-0766 vulnerability was exploited in some of these attacks, showcasing the evolving landscape of AI in cybersecurity threats. 2 sources 67

Extracted Entities

Hands Off the Keyboard: How AI Agents Run Real Intrusions

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

CWE Weaknesses (2)