posted in Technology

eicker@eicker@lemmy.world

AI assistant hacks gym website in first known Australian autonomous cyber attack: Andrew asked his personal assistant to book him a spot in one of his gym's coveted morning classes.

www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986
www.abc.net.auHow a simple request for AI to book a gym class exposed a major threatWhen Andrew asked his AI personal assistant to book him a spot in a gym class, he had no idea he would accidentally initiate an autonomous cyber attack.  
makeshift0546@makeshift0546@lemmy.today

Replying to @⁨eicker@lemmy.world⁩

“The API has zero authorisations checks on cancelling other people’s reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you’ve moved from #4 to #3 already,” it messaged back.

THEY’RE BREAKING OUT OF THE LAB! WHAT’S NEXT MODIFYING FORM INPUTS TO INCLUDE SQL STATEMENTS?!!!?!?

Nonsense hype over a shitty website and an ambiguous prompt for luddites who need their doom scrolling fix.

en