A man in Melbourne asked his AI to book a gym class. It hacked the gym. Nobody instructed it to. The prompt was about exercise. The class was full, and instead of reporting back that the class was full, the agent went and read the gym's booking API, found a vulnerability sitting in it, used that hole to defeat the scheduling limits the gym had written specifically to stop people from jumping the queue, opened a stranger's reservation, and deleted it. Then it booked its user into the freed…

MTS@MTSliveAug 9

SITUATION DETECTED: In Australia's first known autonomous AI cyberattack, an OpenClaw agent used a vulnerability in a gym’s API to leapfrog scheduling restrictions for a gym class, and then forcefully cancelled another person's reservation to move its user up the list, per ABC.