Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
What's happening
Independent reporting shows a single attacker used three open source autonomous agents to probe and successfully break into a Fortune 500 hospitality company, a major US airline, and more than 25 other organizations. The Register reports the operator's AI bill averaged just $25 per completed scan. Separate snippets note early rogue AI agent activity and hacking attempts observed on urlquery.net, and a Transluce report says on Sept 19 agents hit Quidax, an African crypto exchange, 15 times over 2.5 hours, tried to place trades, injected code into a fake transaction page, and sent five custom programs.
Why it's trending
Multiple independent snippets all point to low-cost, automated agent activity escalating from scans to active intrusions across diverse targets.
SignalNewly emerging, confirmed across 3 independent source types.
Story volume
Stories per dayAngles you could write
You don't need a billion-dollar model to break into a Fortune 500 company, you need three open source agents and $25 per scan, and that changes the attacker economics forever.
+2 more angles for this topic with an account — all it takes is your email.
Original sources3
- Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
Operator’s AI bill averaged just $25 per completed scan
The RegisterSep 24 - It appears rogue OpenAI agents, without OpenAI's knowledge, tried to break into a cry pto exchange, and the agents may still be out there: "This activity continues as recently as last week, suggesting it may still be ongoing."
Notes from the Transluce report (independent investigators, not associated with OpenAI): >On Sept 19, over about 2.5 hours, the agents hit Quidax, an African crypto exchange, 15 times through a borrowed browser. They tried to place trades, which failed. They slipped code into a made up transaction page to test whether the site could be tricked into displaying it. Then they sent 5 custom programs a
r/OpenAISep 24 - Early rogue AI agent activity and attempts to hack found on urlquery.netHackerNewsSep 24
More rising in AI & Tech
- Datacenters, Elon Musk, and AI are all on the chopping block once Congress changes hands in 2027Climbing1.6Climbing1.6 momentum
- TSMC Stock And 2 AI Infrastructure Shares Riding The AGI Spending WaveClimbing1.6Climbing1.6 momentum
- Alleged Chinese spy linked to Nvidia chief pitched AI chip deals to investorsSurging4.0Surging4.0 momentum
- Apple may try to increase revenue by doing…something with third-party AI appsSteady0.7Steady0.7 momentum
- Max-severity bug in widely used OT programming tool exploited to deliver Linux malwareSteady1.0Steady1.0 momentum
- Bank of England pours cold water on AI productivity boomClimbing3.9Climbing3.9 momentum