An AI Agent Found Admin Access to a $13B Startup in 25 Minutes. Here's the Free Tool It Used, and the Docker Mistake That Made It Possible

The story that hit the Hacker News front page this week: a security company, Strix, was evaluating Baseten, a $13 billion inference provider, as a vendor. Before handing over their own code and models, they pointed their own tool, an autonomous AI pentesting agent, at *.baseten.co. No credentials. No source code. About 25 minutes later, the agent...