Lone operator uses 12 AI agents to breach Taiwanese emergency services and steal data
AI SECURITYAcronisredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Acronis Threat Research Unit found a single operator in Taiwan running BOSSAI, a mesh of 12 AI agents, against hundreds of organisations in 11 countries. Builder agents set up infrastructure, while attack agents scanned targets and wrote exploits, with the operator passing output between them manually. Exposed databases, default root credentials, unpatched Oracle databases and open ports were the easy wins, while proper login checks held firm.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Patch exposed databases and remove default credentials.
- Close old open ports that are no longer needed.
- Put login checks in front of every API, including those that serve dispatch and medical data.
- Check your environment for the indicators of compromise that Acronis published.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Companies