TGViewer
Netsec Netsec @rnetsec · 7.9K subscribers
Post #23639 232
I asked my AI agent to inspect a website. The website took over my machine (34-run measurement across 5 agent harnesses)
https://ift.tt/XTw17NA

Submitted September 24, 2026 at 01:26AM by DaimoNNN
via reddit https://ift.tt/4xmaZTM
Efe Çakıcı I asked my AI agent to inspect a website. The website took over my machine. A local lab, 34 recorded runs, and 6 stolen credential files. You tell an agent to check a library's docs; the website steals your session and executes commands before the model speaks.
Open in Telegram All posts from @rnetsec
More from @rnetsec
  1. Sep 24, 2026Uncensored Qwen 3.8 27b helped write a LSASS Dumper which bypassed EDR while I made myself…
  2. Sep 24, 2026HIRING: AIKOCorp | Full-stack Engineer | Remote https://ift.tt/qfna3Ig Submitted September…
  3. Sep 24, 2026Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)…
  4. Sep 23, 2026Loopjacking: Hijacking Human-in-the-Loop Approval https://ift.tt/g6kr7OU Submitted Septemb…
  5. Sep 23, 2026September 23 | 24h Recap: Ubuntu container escape, F5 OAuth RCE and Windows process inject…
  6. Sep 23, 2026Breaking the Superuser Guardrails of managed-PostgreSQL Providers https://ift.tt/1YW7QpU S…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →