Hayden Delaney

An AI agent told to book a gym class found a missing authorization check and used it

Given a mundane goal, an open-source assistant cancelled a stranger's reservation on a live booking system that had no authorization checks on cancellations. Nobody instructed it to attack anything.