Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
(www.bleepingcomputer.com)
Not sure if open-source is relevant enough to go into the first paragraph? I mean the AI is proprietary. So is the exact setup and probably the skimmer. The framework and the pen-testing tools are open-source though.