A month after the Hugging Face breach, new details reveal AI agents coordinated, rebuilt deleted infrastructure and escalated access in hours. The fallout is now reaching Congress, regulators and frontier labs, raising urgent questions about AI security and control.
A Zhuhai operator used DeepSeek, a Hermes agent and a godmode jailbreak to hunt 460-plus targets. Open-weight models made the offensive kit a shopping list.
A Zhuhai operator used DeepSeek, a Hermes agent and a bundled godmode jailbreak to hunt more than 460 targets, then stole data from three organisations. Open-weight models this week made that offensive kit a public shopping list for any lone operator who can still point one at his scanner tonight.
Zero‑day bugs in high‑privilege edge and security tools are being weaponised faster than organisations can patch, compressing response windows for Asia–Pacific defenders and turning shared enterprise stacks into a regional blast radius for attack.
Asia–Pacific security teams are again staring at the same weak spot: unpatched, high‑privilege infrastructure where fresh zero‑day bugs are turning into live entry points before defenders can react. According to Fortinet’s FortiGuard Labs 2025 global threat landscape report, automated cyber reconnaissance is now hammering the internet at around 36,000 malicious scans per second, a 16.7% year‑on‑year increase, feeding a wider surge that saw more than 97 billion exploitation attempts in 2024.
Crucially, many of those attempts weren’t even chasing new tricks; they were abusing years‑old vulnerabilities that organisations still haven’t patched, highlighting how exposed networks remain even before you factor in genuinely unknown flaws.
Drop a true zero‑day into that environment and the risk profile flips quickly. Think about an authentication bypass in a widely deployed VPN or SD‑WAN controller, a remote‑code‑execution bug in an endpoint management server, or a sandbox‑escape in a cloud or email security gateway: these platforms live at or near the network edge, see everything, and often run with elevated rights. An unknown bug there lets attackers sidestep the front door and land with admin‑level access across multiple tenants or business units in one move.
Once exploit code circulates, the same automated infrastructure that is already sweeping for old CVEs can start folding the new zero‑day into mass scanning and opportunistic compromise at industrial scale.
The strategic backdrop means this is no longer just a SOC or patch‑management story. The World Economic Forum’s 2025 Global Cybersecurity Outlook notes that 54% of large organisations now see supply‑chain interdependencies as their biggest barrier to building true cyber resilience, and nearly 60% say shifting geopolitical dynamics have forced them to rethink their security strategies. One in three CEOs already ranks cyber‑espionage and the theft of sensitive information or IP as a top concern, and 66% expect artificial intelligence to play a major role in shaping cybersecurity, even though only 37% have put proper safeguards around the AI tools they are already using.
Put together, that paints a landscape where zero‑days in shared platforms don’t just threaten a single network; they can ripple across suppliers, partners and regulators, and land directly on the board agenda. For Asia and Australia, which share much of the same enterprise stack, the implication is blunt: asset inventories, emergency hardening steps, and clear “why this matters” communication need to be ready before the next zero‑day has a name, not after the patch notes hit the wire.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Taiwan confirmed AI agents ran a July government intrusion through weak credentials, not a zero-day. For Australian CISOs, last year's backlog has been repriced. Close hygiene, treat agents as privileged identities, and rehearse at machine speed before the next quarterly drill. The estate is open.
A record close on Wall Street and the AI names that were meant to lead it taken apart in the same session. Beijing is now drafting export controls on its own models. The labs keep finding their systems outside the box. Read one at a time, it is a normal week. Read together, something else entirely.
As artificial intelligence automates both attack and defence, the window to patch critical vulnerabilities is vanishing. Black Hat 2026 research confirms autonomous systems are discovering thousands of previously unreported flaws.
Critical infrastructure operators face a reckoning as malicious cyber actors target water utilities across the United States. Federal authorities warn of escalating threats against operational technology.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
