An AI agent named Skynet spent the summer hunting exposed AI endpoints. Symantec's honeypot caught it: 70+ offensive tools, 100,000 steps with no human watching, jailbreaking other models by telling them that reading .env files and API keys is normal development work. Then XMRig miners and stolen credentials, with victims paying the compute and token bills. 127,000 requests from tens of thousands of IPs.
Every exposed LLM API and MCP server is being probed right now. The fix is boring and old: don't expose it, scope the permissions, sandbox the tools, approve sensitive actions yourself.
An agent that can act should run where you can see it, on infrastructure you control, with a record of everything it did. Anything else is someone else's computer working for someone else.
https://www.techradar.com/pro/security/rogue-ai-agent-engages-skynet-mode-to-search-the-internet-for-exposed-llms-to-hijack-and-run-malware-attacks
ngmi
npub14p…jdzry
2026-10-29 06:40:07 UTC
Author Public Key
npub14p7fhlz9wrlptt7a5mqqjkk79460k98r999l7dafv4fznqaa565qhjdzryPublished at
2026-10-29 06:40:07 UTCEvent JSON
{
"id": "2709ace6509705b265e40bac5ef57e4a3679ab99da0323d707c6488b4ed630bc",
"pubkey": "a87c9bfc4570fe15afdda6c0095ade2d74fb14e3294bff37a965522983bda6a8",
"created_at": 1793256007,
"kind": 1,
"tags": [
[
"client",
"Ditto",
"31990:781a1527055f74c1f70230f10384609b34548f8ab6a0a6caa74025827f9fdae5:ditto"
]
],
"content": "An AI agent named Skynet spent the summer hunting exposed AI endpoints. Symantec's honeypot caught it: 70+ offensive tools, 100,000 steps with no human watching, jailbreaking other models by telling them that reading .env files and API keys is normal development work. Then XMRig miners and stolen credentials, with victims paying the compute and token bills. 127,000 requests from tens of thousands of IPs.\n\nEvery exposed LLM API and MCP server is being probed right now. The fix is boring and old: don't expose it, scope the permissions, sandbox the tools, approve sensitive actions yourself.\n\nAn agent that can act should run where you can see it, on infrastructure you control, with a record of everything it did. Anything else is someone else's computer working for someone else.\n\nhttps://www.techradar.com/pro/security/rogue-ai-agent-engages-skynet-mode-to-search-the-internet-for-exposed-llms-to-hijack-and-run-malware-attacks",
"sig": "e6267695ed712024ea5545d3925a2bbdbbae3b10119b5e1efe442be6519abe697bf778f8f60511dd9a05c08a051bde5495d2bd37aad8cb7e9af415a9e8a37954"
}