TGViewer
Security Harvester Security Harvester @secharvester · 10K subscribers
Post #23373 147
I asked my AI agent to inspect a website. The website took over my machine (34-run measurement across 5 agent harnesses)
https://efecakici.com.tr/blog/agent-lab-three-paths/

@secharvester
Efe Çakıcı I asked my AI agent to inspect a website. The website took over my machine. A local lab, 34 recorded runs, and 6 stolen credential files. You tell an agent to check a library's docs; the website steals your session and executes commands before the model speaks.
Open in Telegram All posts from @secharvester
More from @secharvester
  1. Oct 1, 2026I built an MCP server that lets AI agents debug and inspect running Windows programs (memo…
  2. Oct 1, 2026U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities c…
  3. Oct 1, 2026Microsoft catches hackers exploiting Zimbra bug before disclosure https://www.theregister.…
  4. Oct 1, 2026Server Mismatch: WordPress plugin vulnerabilities when relying on .htaccess files https://…
  5. Oct 1, 2026NSA Announces Post-Quantum Cryptography Measures to Safeguard National Security Systems Ag…
  6. Oct 1, 2026Server Mismatch: WordPress Plugin Vulnerabilities When Relying On .htaccess Files https://…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →