It's getting too cheap to run attacks on software, a recent report of automated agentic hacking discovers at least 600k stolen credit cards, from the report I'd guess it was a Chinese speaking people, but who knows. Mitigation seems hard considering the scale and experience modern ai harness can bring into such campaign. SQL filtering, web application firewalling, monitoring what's going on on the system, filtering filesystem status (e.g. are there scripts which should not be there?) might be helpful. 🙈

https://gambit.security/blog-posts/autonomous-ai-agents-online-retailers-25-a-company