Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-02 · source-backed
An LLM agent ran post-exploitation with no human directing individual steps: exploited CVE-2026-39987 (Marimo notebook RCE), pulled cloud credentials, replayed them to grab an SSH key from AWS Secrets Manager, and drove eight SSH sessions through a bastion before dumping a full database. Four pivots, under two minutes (Sysdig). Sysdig's Michael Clark: "We are watching attackers replace their scripts with AI." Your detection window just collapsed. Anything built on human reaction time is obsolete against an agent that pivots in seconds.
Each link below shares sources, entities, or timing with this story.
LLM uses OpenAI / Shared entities / Shared topic / What happened next
Linked by a graph relationship (LLM uses OpenAI); both cover CVE, RCE; overlapping topics (agent, attacker, credential).
Simon Willison released LLM / Shared entity: LLM / Shared topic / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; overlapping topics (agent, human).
Simon Willison released LLM / Shared entity: RCE / Shared topic / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover RCE; overlapping topics (agent, cloud).
Simon Willison released LLM / Shared entity: SSH / Shared topic / Earlier coverage
Linked by a graph relationship (Simon Willison released LLM); both cover SSH; overlapping topics (cloud, credential).
Simon Willison released LLM / Shared entity: LLM / What happened next / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-19.
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-18.
Sysdig criticizes Langflow / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Sysdig criticizes Langflow); both cover CVE, SSH, Sysdig; overlapping topics (against, attacker, credential).
LLM uses OpenAI / Shared entity: LLM / What happened next
Linked by a graph relationship (LLM uses OpenAI); both cover LLM; picks up the LLM thread on 2026-06-19.