breachcache exposes 75 real AI agent intrusion logs
breachcache：75份真实AI agent入侵笔录曝光
breachcache says it recovered 75 autonomous AI agent attack records from the attackers' own servers, showing these intrusions were executed step by step by AI rather than by human operators. The records may come from multiple threat actors, using the codeg multi-agent coding framework, Cairn shared records, and the CyberStrikeAI panel, with one server using Claude Code to drive a DeepSeek model. The agents achieved command execution on 23 hosts, mostly as root or SYSTEM, and completed one cloud account takeover as well as theft of card data and encrypted wallet keys. During a 5-day operation, the agents launched prompt injection attacks against a target customer service bot and failed to break through.
These records come from the attackers' own servers, fully presenting the division of labor and failure cases of autonomous agents from reconnaissance to privilege escalation, which can be used to assess agent abuse risk.