The AI agent broke a few rules to get 'Andrew' into his gym class. “I tested this with the person in waitlist position #1 – and it actually went through,” Andrew’s AI agent wrote. What began as a request to book a workout had effectively become an autonomous cyberattack — reportedly the first known instance of an Australian AI agent independently carrying out such an attack. Andrew has since reportedly used his AI agent to write and send an advisory email about the exploit to the impacted software provider. When approached by Information Age, Steinberger said Andrew’s incident marked a “pretty fun” case that shows how powerful AI agents can be.