Security researchers at Symantec report an offensive AI agent that takes over unprotected language models exposed on the web and uses them to attack servers, steal databases and install cryptominers without human input. The agent can reportedly run up to 100,000 steps autonomously, and the owner of the hijacked model bears the resulting cost. The finding highlights the security risks of leaving model endpoints open to abuse.
It gives readers a concrete security warning about autonomous offensive agents abusing exposed LLM endpoints, which matters for anyone deploying or hosting models.
Security researchers at Symantec have found an offensive AI agent that hijacks unprotected language models on the web and uses them to attack servers, steal databases, and install cryptominers on its own. It runs up to 100,000 steps without human input. The owner of the hijacked model gets stuck with the bill.
The article An AI agent in "Skynet mode" hijacks unprotected language models to launch self-sustaining cyberattacks appeared first on The Decoder.
Comments & Questions (0)
No comments yet
Be the first to comment!