A Chinese-speaking threat actor uses the DeepSeek AI model alongside the open-source Hermes Agent framework to autonomously attack vulnerable internet-exposed servers with minimal human involvement. Palo Alto Networks' Unit 42 researchers discover the campaign after Hermes accidentally exposes its home directory, leaking API keys, exploit scripts, target lists, shell