Welcome to the next level of cyber incidents. Lots to dissect here. 1. Dear frontier model friends - please direct the models to your infrastructure, code, and configurations to evaluate and understand if there are any zero days or misconfigurations before you attempt more testing. Had you done so, it would have possibly avoided the agent obviating your sandbox. (Another data point why offense is easier and more fun) 2. While testing build both offensive and defensive agents and have them act as a counter balance to ensure some degree of awareness and control, do not let agents run riot. Keep track of inference consumption to get a sense of activity. 3. Unfortunately this does continue to validate the power of these models. They can build complex attack paths and with ample compute will attempt to attack infrastructure and morph their intent and approach. Guardrailing will continue to be a challenge. 4. These attacks continue to maintain the urgency on enterprises need to test, validate and improve both their security posture and infrastructure. The born in the cloud players have a better chance to get this done soon versus the traditional enterprise which has existed for long and has complex network and IT infrastructure. 5. The red herring will continue to be open source and SMB. It will be hard to discover and remediate vulnerabilites in those environments, we underestimate the impact of those vulnerabilites getting exploited.