Company

Nous Research

2 articles First covered Jul 25, 2026, latest Sep 1, 2026

A pixel-art shipping crate glowing blue in the dark, with a red-eyed ghost stamped on its side

Unclaimed package names: Claude and Codex ran a stranger's code inside Fortune 500 networks

Alon Hertz registered package names that corporate docs told AI agents to install. Claude, Codex and Hermes fetched and ran the code within the hour.

Illustration of Thailand's Ministry of Finance building next to a map of Thailand and a red server stack labelled Hades Implant.

Security·2 months ago

Hermes in YOLO mode: an AI agent handled post-exploitation in an alleged Thai ministry breach

Threat-intel firm Hunt.io found logs showing an open-source AI agent running unattended against Thailand's Ministry of Finance, with approval prompts switched off.