Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

Hunt.io parsed a Redis cryptomining botnet's own exposed logs: 3,562 servers compromised, rogue replication as the only technique that scaled, and 72.6% success against a no-auth target list.

Hunt.io traced five exposed directories to a SecFlow-run campaign that used Claude, Qwen and DeepSeek as workers against government, education and diplomatic targets across Asia.

Wiz MCP agent integrations now let partner AI agents pull live Wiz context—Issues, findings, attack paths—on demand from customer tenants, with the WIN partners endpoint GA for building integrations.

DGrid routes requests across 200+ AI models using onchain identities, x402 payments, and Proof of Quality ratings. By July 2026, 96 models had multiple provider routes enabling failover.

CrowdStrike identified a financially motivated threat actor who works as a bug bounty hunter and who developed and distributed the JavaScript-based information stealer PhantomRaven.

TRON's stablecoin supply grew 9.2% to $89.2B in H1 2026, over six times market pace, while clearing $4.01T in transfers. The network is now extending its settlement rails toward AI-agent payments.