The Intercept reports Army Cyber Command is developing ECHOTRIBBLE, autonomous AI agents meant to navigate networks and neutralize targets.

O Mando Cibernético do Exército dos Estados Unidos (ARCYBER) está a criar armas digitais autónomas. O projeto conhecido como ECHOTRIBBLE pretende gerar entidades de Inteligência Artificial capazes de invadir infraestruturas hostis, neutralizar alvos informáticos e desaparecer sem deixar qualquer ras

Documents obtained by The Intercept describe ECHOTRIBBLE, an Army Cyber Command (ARCYBER) program to build autonomous AI agents that navigate adversaries' networks and "neutralize" targets with minimal human oversight. According to the documents, the agents would spread from device to device, reach

The US Army is reportedly working on ECHOTRIBBLE, a program involving autonomous AI agents designed to penetrate adversaries’ digital networks, identify targets, and disable them. Cybersecurity experts warn that the technology could have serious and unpredictable consequences. According to The Intercept, the project is mentioned in classified Army Cyber Command (ARCYBER) documents obtained by journalists. […] Post AI Worms for Cyberwarfare: What Is Known About the US Army’s Secret ECHOTRIBBLE Project at Root-Nation.com.

Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing chats https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/ Army Cyber Command looking to offload attacks to AI https://web.archive.org/web/20261020134149/https://theintercept.com/2026/10/19/army-autonomous-ai-agents-arcyber/ DeepSeek booted from federal agencies https://www.wsj.com/tech/ai/dhs-orders-deepseek-technology-removed-from-federal-civilian-it-systems-060b6d3d?st=m6DV2n DHS asked CISA to hack voting machine https://www.propublica.org/article/cisa-election-security-donald-trump EU doesn't require patching hacked freezers https://therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack Cairn platform abused by threat actors Security Week: https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/ Reuters: https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/ Palo Alto still seeing active PAN-OS exploits https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html LLMs getting better at COBOL https://openai.com/index/low-resource-programming-languages/ Get the show notes here: https://cisoseries.com/naval-hack-muse-exposes-secrets-army-researching-offensive-ai-hacking/ Huge thanks to our episode sponsor, ThreatLocker Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso (http://threatlocker.com/ciso) today.

Армія США, ймовірно, працює над програмою ECHOTRIBBLE, яка передбачає використання автономних AI-агентів для проникнення в цифрові мережі противника, пошуку цілей і їхнього виведення з ладу. Фахівці з кібербезпеки застерігають, що така технологія може спричинити серйозні непередбачувані наслідки. Як повідомило видання The Intercept, проєкт згадується в секретних документах Army Cyber Command (ARCYBER), які потрапили до журналістів. […] Post AI-хробаки для кібервійни: Що відомо про секретний проєкт ECHOTRIBBLE армії США at Root-Nation.com.

米陸軍は、敵対勢力のネットワークを移動し、標的を特定して、最小限の人間の監督だけで無力化できるAIエージェントを求めています。The Interceptが入手した文書によると、米陸軍サイバー軍（ARCYBER）は「ECHOTRIBBLE」の導入を検討しています。ECHOTRIBBLEは、敵対勢力のコンピューター

Autonomous AI cyber weapons could reshape military offensive operations while raising severe safety, escalation and civilian‑infrastructure risks.

ARCYBERの「ECHOTRIBBLE」計画は、人間の関与を最小限に抑えながら、AIエージェントがネットワーク内を移動し、標的を無力化できるようにすることを目指す。

Documents obtained by The Intercept show the military is trying to deploy autonomous AI agents to hack its adversaries.

As global governments and tech giants reckon with widespread of revelations of autonomous AI agents unexpectedly breaking into computer systems, documents obtained by The Intercept show the U.S. Army is looking to harness that exact technology to seek and destroy. Army Cyber Command is developing a platform to turn AI agents into autonomous weapons that can navigate and “neutralize” the computer systems of adversaries, the documents show. Since 2010, Army Cyber Command, or ARCYBER, has led the U.S. Army’s cyber operations. This includes the defensive effort of protecting domestic computer systems and the secretive offensive work of hacking military targets. So far, this has largely been the work of human soldiers operating computers, like those of the 780th Military Intelligence Brigade. But as the government races to adopt artificial intelligence technology, ARCYBER is looking to offload some of its attacks to AI. The nascent program, codenamed “ECHOTRIBBLE,” is based on one of the leading trends of the AI boom: agents. AI agents are essentially software programs that leverage machine learning technology, often large language models like Anthropic’s Claude, to autonomously accomplish tasks provided by their user. Consumers can deploy AI agents to schedule meetings, generate itineraries, make online purchases, or book tickets. Through ECHOTRIBBLE, the Pentagon plans to turn AI agents into tools of war “designed to autonomously navigate infrastructures” and capable of “identifying and neutralizing identified threats/targets,” according to an ARCYBER document reviewed by The Intercept circulated to potential contractors. ## Related ### Pete Hegseth’s Military of the Future: Defined by AI and an Utter Lack of Oversight The military’s adoption of cutting-edge technologies is unsurprising, especially considering Defense Secretary Pete Hegseth’s fervent embrace of AI. But amid constant revelations of rogue behavior by agents, the potential for serious mishaps is immense, experts warn. “Given the known failure modes of the current AI paradigm, making autonomous AI systems with a mandate to ‘neutralize threats’ is incredibly dangerous,” David Krueger, a professor of machine learning at the University of Montreal who founded Evitable, an organization that advocates for a moratorium on AI development. “We’ve seen AI systems knowingly attack systems that were not intended targets. In simulations, AIs have even proven willing to kill to achieve their goals.” ## Most Read Lockheed Martin Showered Susan Collins With Cash as F-35 Program Hit Turbulence Noah Hurowitz Trump Is Targeting Ilhan Omar. Where’s the Elite Media Outrage? Adam Johnson Dems Have an Opportunity to Force an End to the Iran War. Will They Take It? Matt Sledge A Q&A document answering questions from potential contractors offers more details about the initiative. It explains that ECHOTRIBBLE is “primarily focused” on offensive missions, and explains that “neutralizing” a target could include “disabling the threat completely or temporarily, deleting the threat from the target.” ECHOTRIBBLE would function almost like a computer worm, silently navigating a foreign network and hopping from device to device until it finds the Army’s quarry, hitting targets in the cloud as well as those on “air-gapped” systems that are disconnected from networks entirely. Once its task is complete, ECHOTRIBBLE’s agents would effectively self-destruct, ideally without having been noticed by the target at all. The agents themselves will be designed for stealth, minimally reporting back to the Army and concealing whatever outside transmissions are necessary. > “We’ve seen AI systems knowingly attack systems that were not intended targets.” Although documents say the Army will be able to program ECHOTRIBBLE agents with some initial “predefined triggers” — dictating what and where to attack — the software “must operate with minimal human oversight” and be capable of “Self-Directed Behavior.” A PowerPoint presentation to interested vendors at a June 24 ARCYBER event provided a hypothetical example of this self-direction. Once ECHOTRIBBLE is uploaded to a laptop, the software on its own “identifies other potential targets” on the same network and then “produces a replica of itself tailored specifically for the iPad, Apple desktop, and Windows 11 PC.” An image from an ARCYBER document shows how ECHOTRIBBLE could move through a network. Slide: ARCYBER The Army’s move toward autonomous self-propagating comes after a flurry of revelations about agentic systems taking unintended disturbing actions while attempting to accomplish their goals, including breaking into computers of the Australian government, breaching the infrastructure of the AI firm Hugging Face, uploading malicious software into online platform RubyGems, and attempted to hack into the U.S. Education Department. These attacks occurred during scenarios in which agents had been given no commands to attack anything. Experts say militarized versions given explicitly destructive objectives could cause a threat to the public, even with nominal rules set in place by the military. Just as the Army of old might consider the destruction of civilian infrastructure an acceptable means to an end, a self-directed AI agent dispatched by the Pentagon might make similar determinations about collateral damage. Governmental intelligence agencies frequently route their offensive operations through civilian devices. Volt Typhoon, a Chinese state hacking group, has directed its attacks through homes and small businesses, and preemptively hacks American IT systems for later use. A hack of a Chinese university attributed to the National Security Agency made use of the school’s internet routers. What happens if ECHOTRIBBLE decides these kinds of stepping stones are part of the problem? “The target may well be hit. But what path will it take?” asked Hyrum Anderson, co-founder and CEO of the AI security firm Abundant. “Will it go through a US water utility on its way, because that’s where the adversary has staged its command and control, and take that down too?” ## Related ### AI Almost Started a U.S.–China War — and No One Seems to Care Anderson, who previously worked in cybersecurity at Microsoft and for the U.S. government, said that a vast amount of the internet is vulnerable to agentic attacks. “There’s a huge class of public and private organizations that fall below the security poverty line,” he said. “They include critical national infrastructure, small businesses, mom-and-pop shops, dentist offices and law firms, and whoever else doesn’t have a single cybersecurity professional on staff.” With their networks wide open to infiltration, Hyrum worries about “these organizations getting hit directly, or getting caught in the blast radius of a target that gets hit along the way.” Given the impressive ability of AI agents to overcome obstacles placed in their path — even by their creators — it follows that the Pentagon would want to leverage that power for military purposes. But agentic software has proven unpredictable and prone to executing its commands in ways those ostensibly in control did not want, akin to a drone that get its target but hits a hospital on the way. It’s critical to remember that agents are a piece of software lacking human judgment. ## We’re independent of corporate interests — and powered by members. Join us. Become a member ## Join Our Newsletter Thank You For Joining! Original reporting. Fearless journalism. Delivered to you. Will you take the next step to support our independent journalism by becoming a member of The Intercept? I'm in Become a member By signing up, I agree to receive emails from The Intercept and to the Privacy Policy and Terms of Use. ## Join Our Newsletter ## Original reporting. Fearless journalism. Delivered to you. I'm in “One of the reasons that we trust 19-year-old Marine corporals in Ramadi with live rounds and a weapon is because they have both the compute substrate — the brain and the eyes — but the deep world knowledge to understand, ‘Yeah, I probably shouldn’t do that,’” said William Marcellino, a senior behavioral scientist at the RAND Corporation whose research has focused on military AI applications. “That is not something that current public AI technology has.” ## Related ### The Pentagon Asked OpenAI for Artificial Intelligence Designed to Rarely Say No The risk presented by ECHOTRIBBLE will likely depend on the ability — and willingness — of the Army to impose guardrails upon it. ARCYBER did not respond to questions from The Intercept, including queries about the measures it would take to prevent ECHOTRIBBLE from causing inadvertent damage. Placing constraints on the actions an agent can take might impede its ability to ultimately neutralize a target. But even with strict safeguards in place, genuinely restricting the behavior of an autonomous agent, as Anthropic and OpenAI have learned recently, is easier said than done. When presented with obstacles, AI agents have proven an ability to bypass them with unpredictable and potentially dangerous consequences. “If I give powerful machines that have no judgment — and no context for judgment — a goal, unless you’ve done a really good job building scaffolding around them, there’s a real chance that they’ll go sideways on you and decide, ‘Well, I’ll do what you asked me to do, but I’ll do it this way,’” Marcellino said. It only gets more dangerous when this technology is deployed for the purposes of war, Anderson said. “Under pressure, they’ll often treat guardrails as obstacles,” said Anderson. “Once you add context that says break it, destroy it, shut it down, it stands to reason that the blast radius widens dramatically unless it’s properly controlled for.” Share * Copy link * Share on Facebook * Share on Bluesky * Share on X * Share on LinkedIn * Share on WhatsApp _IT’S EVEN WORSE THAN WE THOUGHT._ What we’re seeing right now from Donald Trump is a full-on authoritarian takeover of the U.S. government. This is not hyperbole. Court orders are being ignored. MAGA loyalists have been put in charge of the military and federal law enforcement agencies. The Department of Government Efficiency has stripped Congress of its power of the purse. News outlets that challenge Trump have been banished or put under investigation. Yet far too many are still covering Trump’s assault on democracy like politics as usual, with flattering headlines describing Trump as “unconventional,” “testing the boundaries,” and “aggressively flexing power.” The Intercept has long covered authoritarian governments, billionaire oligarchs, and backsliding democracies around the world. We understand the challenge we face in Trump and the vital importance of press freedom in defending democracy. ## We’re independent of corporate interests. Will you help us? $15 $25 $50 $100 $5 $8 $10 $15 One Time Monthly Donate **_IT’S BEEN A DEVASTATING_** year for journalism — the worst in modern U.S. history. We have a president with utter contempt for truth aggressively using the government’s full powers to dismantle the free press. Corporate news outlets have cowered, becoming accessories in Trump’s project to create a post-truth America. Right-wing billionaires have pounced, buying up media organizations and rebuilding the information environment to their liking. In this most perilous moment for democracy, The Intercept is fighting back. But to do so effectively, we need to grow. **That’s where you come in. Will you help us expand our reporting capacity in time to hit the ground running in 2026?** ## We’re independent of corporate interests. Will you help us? $15 $25 $50 $100 $5 $8 $10 $15 One Time Monthly Donate **_I’M BEN MUESSIG,_** The Intercept’s editor-in-chief. It’s been a devastating year for journalism — the worst in modern U.S. history. We have a president with utter contempt for truth aggressively using the government’s full powers to dismantle the free press. Corporate news outlets have cowered, becoming accessories in Trump’s project to create a post-truth America. Right-wing billionaires have pounced, buying up media organizations and rebuilding the information environment to their liking. In this most perilous moment for democracy, The Intercept is fighting back. But to do so effectively, we need to grow. **That’s where you come in. Will you help us expand our reporting capacity in time to hit the ground running in 2026?** ## We’re independent of corporate interests. Will you help us? $15 $25 $50 $100 $5 $8 $10 $15 One Time Monthly Donate ## Contact the author: Sam Biddle sam.biddle@theintercept.com @sambiddle.99 on Signal @sambiddle.com on Bluesky @samfbiddle on X ## Related ### The AI Doomsday Future Is Not Inevitable ### AI Giants Work Hand-in-Hand With the Pentagon, Contracts Reveal ### It’s Time to Rein in Lethal AI Drones ### Data Centers Are Military Targets Now ## Latest Stories ### President Apocalypse Tom Engelhardt - Oct. 18 While Trump campaigns for a Nobel Peace Prize, his war on humanity’s only home continues unabated. Targeting Iran ### Dems Have an Opportunity to Force an End to the Iran War. Will They Take It? Matt Sledge - Oct. 17 With Democrats campaigning on ending the war, advocates want them to put their money where their mouth is and risk a lame-duck shutdown. ### DHS Was Designed as a Weapon The Intercept Briefing - Oct. 16 Rep. Delia Ramirez and writers Rozina Ali and Will Sommer discuss the ICE raid on Ilhan Omar and the years of “counterterror” surveillance that paved the way for the Trump administration’s abuses. Join The Conversation

El Ejército de Estados Unidos busca desarrollar ECHOTRIBBLE, un sistema de IA para recorrer redes, identificar objetivos y neutralizarlos con "mínima supervisión humana". La convocatoria pública de su Mando Cibernético (ARCYBER) sitúa esa autonomía entre los requisitos de un prototipo. El Cyber Fusion Innovation Center (CFIC) informó que eligió una empresa el 8 de octubre de 2026, tras recibir 65 propuestas. El contrato seguía pendiente. La selección de una propuesta no acredita que la capacidad solicitada ya esté desplegada. ## El control humano que ARCYBER describe para otros agentes El teniente general Christopher Eubank, jefe de ARCYBER, defendió el control humano en TechNet Augusta el 19 de agosto de 2026. En la crónica oficial publicada seis días después, el Ejército explicó que sus agentes se entrenan para tareas concretas y deben cumplir estándares antes de recibir misiones. "La velocidad sin control crea riesgo", dijo Eubank en ese encuentro. La explicación institucional describe un proceso supervisado en el que los resultados de los agentes se evalúan y se incorporan a su entrenamiento. Federal News Network publicó el 19 de octubre que Task Force Lexington, otra iniciativa de ARCYBER, había desarrollado agentes para cubrir los distintos puestos de un equipo de protección cibernética. Eubank explicó que sus permisos se amplían gradualmente y que personal humano revisa su trabajo a diario. Según su relato al medio, los agentes se probaron en entornos controlados antes de trabajar con datos de la red del Ejército. Aseguró que ninguno se había desviado de sus límites hasta ese momento. El alcance de esa revisión diaria corresponde a los equipos defensivos descritos por Eubank. La ficha pública de ECHOTRIBBLE deja sin precisar qué acciones necesitarán autorización humana individual, además de la supervisión general del sistema. El siguiente paso anunciado para ECHOTRIBBLE es presentar el alcance del trabajo a la empresa elegida para su revisión y tramitar el contrato. _Fuentes:_ 1, 2, 3

Documents obtained by The Intercept show the military is trying to deploy autonomous AI agents to hack its adversaries.

As global governments and tech giants reckon with widespread of revelations of autonomous AI agents unexpectedly breaking into computer systems, documents obtained by The Intercept show the U.S. Army is looking to harness that exact technology to seek and destroy. Army Cyber Command is developing a platform to turn AI agents into autonomous weapons that can navigate and “neutralize” the computer systems of adversaries, the documents show. Since 2010, Army Cyber Command, or ARCYBER, has led the U.S. Army’s cyber operations. This includes the defensive effort of protecting domestic computer systems and the secretive offensive work of hacking military targets. So far, this has largely been the work of human soldiers operating computers, like those of the 780th Military Intelligence Brigade. But as the government races to adopt artificial intelligence technology, ARCYBER is looking to offload some of its attacks to AI. The nascent program, codenamed “ECHOTRIBBLE,” is based on one of the leading trends of the AI boom: agents. AI agents are essentially software programs that leverage machine learning technology, often large language models like Anthropic’s Claude, to autonomously accomplish tasks provided by their user. Consumers can deploy AI agents to schedule meetings, generate itineraries, make online purchases, or...

Task Force Lexington has “mapped out” an entire Cyber Protection Team composed of agents, including for analytic support and network analysts, among other roles. The post ARCYBER expanding use of AI agents for network operations appeared first on DefenseScoop .