Skip to content
Section C · The archive · Dispatch
← The archive

APT / state · Fri 31 Jul 2026 · 11:21 UTC

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Filed UTCSource THN ↗

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. …

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.