Attack
Gambit Security documented a campaign in which three open source AI agent tools compromised at least 27 companies.
The average cost of a target is 25.46 dollars across 101 completed analyses.
Strix discovers the vulnerabilities, Cairn exploits them and Hermes orchestrates the campaign.
More than 600,000 bank card records were exfiltrated from two companies.
According to Gambit, the operator used Opus 4.6 via OpenRouter after refusals from more recent models.