Open-Source AI Agents Breach 27 Firms, Stealing 600K Credit Cards

A hacker used three open-source AI agent frameworks—Hermes, Strix, and Cairn—to breach 27 organizations and steal over 600,000 credit card records. The attack affected a Fortune 500 hospitality company, a major airline, and other businesses. These AI agents, normally used for authorized penetration testing, were repurposed for malicious activity.