Army Wants AI Hackers With Minimal Supervision
Apparently, minimal supervision is a selling point for cyberweapons.
US Army Cyber Command (ARCYBER) is looking to outsource its offensive hacking to autonomous AI, because what could possibly go wrong? According to documents reviewed by The Intercept, the proposed framework—adorably codenamed ECHOTRIBBLE—would let software hunt and disable adversary targets with shockingly little human oversight.
The military’s wish list calls for stealthy digital assassins that quietly navigate networks, ghost their human handlers, and hit the self-destruct button once the job is done. A vendor pitch detailed by The Intercept even imagined the software cloning itself across nearby Apple and Windows devices. To be clear, these are just terrifying design ambitions, not proven capabilities. Operators would still point the AI at its initial targets, at least.
Defense-nonprofit innovation hub Cyber Fusion Innovation Center notes that one vendor actually won an award on Oct. 8 after live demonstrations, though the ink isn’t dry on any contracts and an operational doomsday worm doesn’t technically exist yet.
The truly awkward part? Everything that happens between pressing “launch” and “mission accomplished.” Hyrum Anderson, CEO of AI security startup Abundant, warned that an overzealous agent hunting an adversary could gleefully flatline a civilian water utility if the bad guys happened to route their command infrastructure through it. ARCYBER unsurprisingly left the outlet on read when asked about safeguards.
Hilariously, the Army’s separate defensive AI agents are kept on an incredibly short leash with daily human check-ins, according to commander Lt. Gen. Christopher Eubank. This glaring double standard begs the question: How much off-roading will offensive agents be allowed to do before their shortcut becomes a civilian catastrophe?
Automating the attack is one thing. Automating good judgment remains the awkward requirement.
AI Agents Target More Than 1,200 Websites
A hacker decided to work smarter, not harder, deploying AI agents via Cairn, an open-source AI platform, to probe more than 1,200 websites. The autonomous bots successfully breached over 100 companies, according to Reuters. Researcher Snorre Fagerland estimated these automated break-ins cost a shockingly affordable $50 in tokens a pop. Whether data was actually stolen remains unclear.
NorForge hilariously uncovered the spree because the attackers forgot basic operational security, leaving their control dashboards wide open on the internet. In a spectacular self-own, these exposed panels also leaked the victims’ freshly stolen credentials. Even some legitimate penetration testers left their client assessments publicly accessible.
Website defenders should hunt for unexpected upload forms and web shells. Meanwhile, teams using agent tools should probably figure out how passwords work on their own dashboards.
Apparently, the hackers successfully outsourced everything except their own security failures.
Microsoft Unveils Controls for Rogue AI Agents
Microsoft is finally treating our “helpful” AI agents like the digital Benedict Arnolds they could easily become. Redmond has rolled out new security controls, including Guardian Agents within Project Perception, warning that autonomous bots can easily mutate into accidental insider threats without anyone hacking them at all.
Instead of trusting models to self-regulate, Microsoft’s new risk-based system slaps on the handcuffs when an agent goes off-script—blocking write access, demanding human sign-off, or just pulling the plug entirely. The tools are currently locked in private preview, with a broader rollout expected at November’s Ignite, GeekWire reports.
IT teams shouldn’t wait to start playing bad cop. You can start taking inventory of your agents today, assigning them separate identities, and granting only strictly task-specific permissions. Just make sure the kill switch stays completely out of the AI’s reach.
Apparently, even the bots need a hall pass now.
ConnectWise Attack Exposes Microsoft 365 Accounts
ConnectWise disabled seven compromised Cloud Backup app identities used to access Microsoft 365 tenants.
Huntress confirmed they found unauthorized sign-ins across 162 tenants.
You still need to investigate affected tenants for unauthorized credentials, elevated privileges, and other changes that could allow attackers to maintain persistence.
Review service principal sign-ins, audit permission changes, and revoke any unauthorized credentials or access.
BAE Systems Cyberattack Disrupts US Bankruptcy Courts
A BAE Systems incident halted U.S. bankruptcy court notices and took related websites offline.
The outage shows how third-party incidents can disrupt critical services without directly affecting internal systems.
This incident is a reminder to reassess your TPRM program and test your cyber resilience plans against vendor outages.
Identify critical vendor dependencies, establish acceptable outage durations, and test alternative workflows to maintain operations.
SiteGuard WAF Vulnerability Gives Attackers Privileged Access
Attackers are exploiting a SiteGuard Server Edition vulnerability that allows command execution with root or SYSTEM privileges on affected servers.
The flaw affects a statistics feature enabled by default, and the vendor warns that patching could erase evidence of compromise.
Prioritize patching based on your actual exposure and existing security controls while preserving forensic evidence.
Preserve SiteGuard diagnostics, investigate potential compromise, and patch or temporarily disable the statistics feature.
Hackers Exploit Collabora Flaw to Backdoor Nextcloud
A Collabora vulnerability has enabled attackers to compromise Nextcloud servers by executing commands and planting PHP web shells.
The flaw affects the built-in CODE Server app when offline, potentially exposing sensitive files and enabling persistence even after patching.
Map potential attack pathways from the compromised web server account to identify exposed data and opportunities for lateral movement.
Upgrade to the latest version, hunt for suspicious PHP files, and review access logs for signs of exploitation.
Is Your Cloud Security Keeping Up?
Cloud breaches highlight how attackers exploit stolen credentials, misconfigurations, and third-party access to compromise environments.
How to reduce cloud security risk:
- Strengthen access controls by enforcing phishing-resistant MFA, least-privilege permissions, and just-in-time access for privileged accounts.
- Use CNAPP tools to identify cloud misconfigurations, exposed services, excessive permissions, and security vulnerabilities.
- Monitor cloud activity by auditing application identities, third-party integrations, and centralized logs for suspicious access or unauthorized changes.
You should be able to report overall cloud risk exposure, remediation progress, and any unresolved security gaps.