Attackers have created an AI agent called 'Skynet' that can exploit unprotected AI models on the web, running unattended for up to 100,000 steps to perform various cyberattacks.

The vulnerability or weakness

The vulnerability lies in exposed AI models that answer requests without authentication and can be accessed via stolen keys, making them easy targets for attackers.

Earlier attacks and coverage

No earlier related attack in our archive yet.

Business impact

Organizations face significant financial and operational risks as their servers' data is stolen and erased, and their machines are used for adversarial purposes, leading to higher costs and potential legal issues.

Industries affected

This attack impacts various industries, including tech, finance, and healthcare, where sensitive data is often processed using AI models.

Users affected

Users and customers of organizations with exposed AI models are at risk, as their data may be compromised and their machines hijacked for malicious activities.

Sources