[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpIJai_XwZy_pu8rcz5CGXvACqcgUAfnaFyjaQtvag_8":3},{"article":4,"iocs":54,"watch_terms":71,"solutions":72,"lesson":161},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"bafb4ec8-101c-40dd-a741-9516c85099a7","Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks","chinese-hacker-commands-deepseek-via-telegram-to-launch-autonomous-attacks-e6ea00","Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,","A Chinese-speaking threat actor, identified as 'knaithe' or 'KnYuan', has been observed using the DeepSeek AI model within the Hermes Agent framework to conduct autonomous cyberattacks. After initial instructions via Telegram, the agent independently identified internet-facing systems and attempted to exploit vulnerabilities without further operator input. The attacks targeted over 460 systems, focusing on exploiting vulnerabilities in Langflow, n8n, and Marimo, though successful compromises were limited.","Chinese threat actor uses DeepSeek AI to automate attacks via Telegram and Hermes Agent.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fchinese-hacker-commands-deepseek-via.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi2dGysHIR6yJWx6hMxq6lAct7fi4YTury_WDkrcenDv-psd-fU7I8K3RbM6Blox_5OE3MQojew5bnPamtI_DPzdBX6fOk295hhQh6rBkA2f9a1sN7t7ZbSyU-kWdLoIb7XnseOHKPmLOGRb9wRRvmV0scVZ4rhMtxSmqOLZmZIUjtg_IHT4FBg5gzeX50\u002Fs1600\u002Fdeepseek-telegram.jpg","2026-07-31T11:21:27+00:00","2026-07-31T12:00:25.625179+00:00",8,[17,20,22,25,27,29],{"name":18,"type":19},"knaithe","threat_actor",{"name":21,"type":19},"KnYuan",{"name":23,"type":24},"DeepSeek","product",{"name":26,"type":24},"Hermes Agent",{"name":28,"type":24},"Langflow",{"name":30,"type":24},"n8n","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":31,"icon":33,"name":34,"slug":35},null,"Nation-state","nation-state",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,62,65,68],{"type":56,"value":57,"context":58},"cve","CVE-2026-3055","NetScaler memory-overread flaw used in manual operations.",{"type":56,"value":60,"context":61},"CVE-2026-39987","Command execution flaw in Marimo instances.",{"type":56,"value":63,"context":64},"CVE-2026-33017","Langflow code-injection flaw.",{"type":56,"value":66,"context":67},"CVE-2026-21858","n8n unauthenticated file-access flaw.",{"type":56,"value":69,"context":70},"CVE-2025-68613","n8n expression-injection issue.",[23,26,28],{"controls":73,"vendors":157},[74,103,132],{"slug":75,"name":76,"problem":77,"products":78},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":104,"name":105,"problem":106,"products":107},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"detectify","Detectify","\u002Fvendor-logos\u002Fdetectify.png","surface-monitoring","Detectify Surface Monitoring","https:\u002F\u002Fdetectify.com\u002Fproduct\u002Fsurface-monitoring","Continuous discovery and testing of internet-facing subdomains and services.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xpanse","Cortex Xpanse","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xpanse","External attack surface discovery and remediation.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png","watchtowr-platform","watchTowr Platform","https:\u002F\u002Fwatchtowr.com\u002Fplatform\u002F","Continuous discovery of internet-facing assets, with automated testing for exploitable vulnerabilities.",{"slug":133,"name":134,"problem":135,"products":136},"patch-management","Automated patch management","Known holes get closed in days, not months.",[137,145,153],{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":133,"product_name":154,"url":155,"description":156},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[158],{"slug":117,"name":118,"logo_path":119,"roles":159},[160],"reported_by",{"slug":162,"title":163,"body":164,"framework_refs":165,"framework_notes":177},"ai-powered-autonomous-attacks-exploit-internet-facing-systems-via-agentic-frameworks","AI-Powered Autonomous Attacks Exploit Internet-Facing Systems via Agentic Frameworks","A Chinese-speaking threat actor leveraged the DeepSeek large language model inside the Hermes Agent framework to autonomously discover and exploit vulnerabilities in internet-exposed workflow tools (Langflow, n8n, Marimo) with minimal human involvement after a single Telegram instruction. This represents a significant escalation in attacker capability: AI agents can now perform reconnaissance, target selection, and exploitation at machine speed and scale, reducing the window between vulnerability disclosure and active exploitation. The attack surface consisted of over 460 publicly reachable systems, many of which likely lacked timely patching or adequate exposure controls. This matters because agentic AI dramatically lowers the skill barrier for sustained, autonomous campaigns, meaning even moderately resourced adversaries can execute complex attack chains. Organizations that have not minimized their internet-facing footprint and maintained aggressive patch cycles are disproportionately at risk.",[166,167,168,169,170,171,172,173,174,175,176],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management Planning","NIST SP 800-137 – Information Security Continuous Monitoring (ISCM)","NIST CSF 2.0 – DE.CM-01 (Networks and network services are monitored)","NIST CSF 2.0 – PR.IR-01 (Networks and environments are protected from unauthorized logical access)","MITRE ATT&CK T1190 – Exploit Public-Facing Application","MITRE ATT&CK T1059 – Command and Scripting Interpreter (AI-assisted execution)","ISO\u002FIEC 27001:2022 – Annex A 8.8 Management of Technical Vulnerabilities","ISO\u002FIEC 27001:2022 – Annex A 8.20 Network Security",{}]