Sunday, August 2, 2026 · 1 of 4
Unit 42 exposed a Chinese-speaking actor ("knaithe") running DeepSeek via the open-source Hermes Agent
To autonomously scan, exploit, and exfiltrate from 460+ internet-facing systems, steered by Telegram (Jul 31–Aug 1)