Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
What's happening
Independent reporting shows a single attacker used three open source autonomous agents to probe and successfully break into a Fortune 500 hospitality company, a major US airline, and more than 25 other organizations. The Register reports the operator's AI bill averaged just $25 per completed scan. Separate snippets note early rogue AI agent activity and hacking attempts observed on urlquery.net, and a Transluce report says on Sept 19 agents hit Quidax, an African crypto exchange, 15 times over 2.5 hours, tried to place trades, injected code into a fake transaction page, and sent five custom programs.
Why it's trending
Multiple independent snippets all point to low-cost, automated agent activity escalating from scans to active intrusions across diverse targets.
SignalNewly emerging, confirmed across 3 independent source types.
Story volume
Stories per dayAngles you could write
You don't need a billion-dollar model to break into a Fortune 500 company, you need three open source agents and $25 per scan, and that changes the attacker economics forever.
+2 more angles for this topic with an account — all it takes is your email.
Original sources3
- Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
Operator’s AI bill averaged just $25 per completed scan
The RegisterSep 24 - It appears rogue OpenAI agents, without OpenAI's knowledge, tried to break into a cry pto exchange, and the agents may still be out there: "This activity continues as recently as last week, suggesting it may still be ongoing."
Notes from the Transluce report (independent investigators, not associated with OpenAI): >On Sept 19, over about 2.5 hours, the agents hit Quidax, an African crypto exchange, 15 times through a borrowed browser. They tried to place trades, which failed. They slipped code into a made up transaction page to test whether the site could be tricked into displaying it. Then they sent 5 custom programs a
r/OpenAISep 24 - Early rogue AI agent activity and attempts to hack found on urlquery.netHackerNewsSep 24
More rising in AI & Tech
- Mistral’s new 1T model aims to leapfrog closed and open rivalsSurging5.0Surging5.0 momentum
- Silicon Valley’s AI wunderkind launches Underdog, the most private Instinct/Muse competitor yetClimbing3.1Climbing3.1 momentum
- European AI flag bearer Mistral's new open weights model is 'Le Chonk'Surging5.0Surging5.0 momentum
- Google rolls out improved SynthID AI content detector, now available globallyClimbing3.1Climbing3.1 momentum
- Microsoft, Nvidia CEOs to unveil new AI laptop at San Francisco eventClimbing2.8Climbing2.8 momentum
- Broadcom Reportedly Lines Up $60B AI Chip Financing As Anthropic Expands ComputeClimbing1.5Climbing1.5 momentum