New blog: Hands Off the Keyboard Autonomous AI agents running intrusions from recon to root. The operator wrote a goal and read the results. This blog covers real AI attacks happening in the wild. - 75 agent transcripts recovered from the attackers' own servers - Claude Code harness on DeepSeek, plus pi and Codex workers on other models - command execution on 23 hosts, most as root or SYSTEM - a single SSRF to cloud metadata to a new root instance in 9 hours 44 minutes - unauthenticated SQLi to OS commands on a domain joined SQL cluster - the target's own Open WebUI rooted through CVE-2026-0766 - one target held for 5 days and 304 reasoning steps - card data and wallet keys stolen, then every trace deleted on command - 150,574 AI gateway resellers swept for upstream keys submitted by /u/BreachCache