Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records

A financially motivated actor used three open-source AI agents (Strix, Cairn, Hermes) to automate vulnerability discovery, exploitation, persistence, and payment-card skimming against online retailers and other companies; researchers observed at least 27 compromised organizations, confirmed malicious skimmers on 19 sites, over 600,000 stolen unexpired credit card records, and destructive cleanup routines that wiped databases after extraction.