DeepSeek used in semi-autonomous exploitation workflowPalo Alto Networks Unit 42 tracked a Chinese-speaking actor, knaithe/KnYuan, using DeepSeek via Hermes Agent to automate reconnaissance, vulnerability research, public exploit retrieval, and attack execution. Recovered sessions show targeting of Langflow and n8n, plus testing of multiple Chinese AI models. Autonomous attempts showed limited confirmed impact

https://cyberpress.org/chinese-hacker-uses-deepseek-ai/