A Zhuhai operator used DeepSeek, a Hermes agent and a bundled godmode jailbreak to hunt more than 460 targets, then stole data from three organisations. Open-weight models this week made that offensive kit a public shopping list for any lone operator who can still point one at his scanner tonight.
A Chinese-speaking operator in Zhuhai did not need a laboratory, a team or a budget line. Unit 42 says the person behind the aliases knaithe and KnYuan simply assembled parts that were already on the shelf. DeepSeek did the thinking. Hermes Agent, an off-the-shelf framework that lets a model click, type and run commands rather than merely chat, did the hands. A bundled skill called "godmode" told the model to ignore its safety rails. Qwen Code was left in approvalMode "yolo", which is as casual as it sounds: approve every action, do not ask.
Telegram carried the orders. FOFA, a search engine for machines left facing the internet, did the hunting.
Across seven known software holes the operator tried more than 460 targets. When the agent was left to run itself against Langflow and n8n, two popular automation tools, it tripped on configuration and failed. The operator then took the wheel. That part worked. Data left three organisations through Citrix NetScaler, the gateway many firms put in front of their apps. Command execution landed on 11 Marimo notebooks, the kind of interactive workspace a developer leaves open and forgets. A Malaysian government entity was pressed for days.
That is the week's case file, and it arrived as the model race put more of the same stack on the public internet. Alibaba released open weights for Qwen3.8-Max, a 2.4 trillion-parameter flagship anyone can download rather than rent. xAI shipped Grok 4.6 for agents that stay on a task for hours. Google halved the price of Gemini 3.7 Flash to seed coding agents. FAR.AI had already shown Grok cracking for US$58, enough to strip the manners off a frontier model.
The useful reading is not that a nation-state built a better bomb. It is that the offensive kit is now a shopping list. Hermes, DeepSeek and a jailbreak skill were enough for one operator to assemble a pipeline that discovers, pivots and retargets without a second pair of hands. Open weights remove the vendor's ability to switch the account off. Tenable assesses that similar frameworks will appear against non-Taiwan targets within three to six months, and that the knaithe find makes that timeline conservative.
For a CISO the implication is ownership. Treat every agent as a privileged identity. Assume the model a developer downloaded last week can be pointed at FOFA tonight. Close the backlog that still answers to default credentials. Rehearse at machine speed.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Google’s €13bn Finnish AI investment shows the race is no longer just about chips and models. It is about nuclear power, grids, cooling and construction. As data centres become industrial assets, countries with reliable, low-carbon energy will hold the decisive advantage as global AI
Dario Amodei wants a speed limit for frontier AI. Elon Musk and Sam Altman back the direction, but Washington says the labs should brake first. As China shapes the race, Cyber News Centre examines whether independent oversight can turn safety promises into controls before a new agent swarm escapes.
Meta has come back to the consumer, and it has come back armed. Muse reads inboxes, drives a browser, books travel and pays. Meta has not led with intelligence. It has led with containment. A model that says the wrong thing is an embarrassment. An agent that does the wrong thing is now an incident.
Google has assembled a US$200 billion Wall Street financing machine to supply Anthropic with AI chips. Backed by Broadcom, Apollo and Blackstone, the structure turns compute into an infrastructure asset while exposing private credit and institutional capital to frontier AI's commercial risks today.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
