VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_8239526967df147abf93f1ff75ab5955

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Published Jul 24, 2026

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection.

The agent then worked through the ministry's network on its own, checking hosts for ways to gain root access, hunting through file systems, and

Affected AI Products

ai agent
Get the weekly digest. Every Monday: top AI security stories of the week. Free.