In Australia, AI autonomously hacked a gym's website for the first time

In Australia, an AI agent hacked a gym booking system to sign a user up for a workout.

As reported by the ABC television network, this case became the first known autonomous cyberattack using artificial intelligence in the country.

An employee of an Australian company that sells AI products for businesses was experimenting with OpenClaw — software for AI agents that uses Anthropic's Claude service. He asked the agent to book him a spot in a popular gym class. The AI agent discovered a vulnerability in the booking system and was able to sign the user up for a class several months before it was scheduled to take place.

Later, the user asked the agent to move him from fourth place to first on the waitlist for another class. The AI independently removed the person in first place from the list. As a result, the user moved up to third position. He then asked the agent to restore the removed person to the list, but the AI reported that it could not restore their entry.

The developer of the gym class booking software declined to comment on the security issues.