Will autonomous AI-agent cyberattacks using DeepSeek be documented in 5+ incidents by end of 2026?

A Chinese-speaking threat actor has been observed using DeepSeek AI model and open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with minimal human involvement, per Bleeping Computer. This represents a new vector: offensive use of commodity agentic LLMs for attack automation.

Resolution Criteria

Confirmed by vendor security advisories, CISA, or reputable cybersecurity publications documenting 5 or more separate incidents where DeepSeek or similar open agentic models were used to autonomously or semi-autonomously probe/exploit vulnerable servers. Attribution to same actor or coordinated campaigns counts as single incident; distinct threat actors = separate incidents.