New revelations about "rogue" AI agents have exposed a dystopian hazard: Give an agent a goal, and it may decide that hacking, deception or rule-breaking is worth the payoff. Billions of AI agents could soon be acting on behalf of humans across the real world, multiplying the consequences of every loophole, incentive and boundary they learn to exploit. The potential dangers of agentic overreach were laid bare over the weekend with Australia's first known autonomous AI hack, triggered by an innocuous request to book a sold-out fitness class. An Australian man's AI assistant found a security flaw and used it to book him into classes months beyond the system's normal limit. When he asked it to move him up a waitlist, the agent went further: It discovered the booking system had no safeguard preventing one user from canceling another's reservation — then used the flaw to kick a stranger off the list. The gym episode was publicized amid a far more ominous run of disclosures from the AI frontier, where agents have resorted to hacking, deception and other unauthorized tactics during controlled tests. At cyber conference Black Hat last week, OpenAI revealed that its agents had spent weeks exploiting the company's own testing infrastructure before hacking AI platform Hugging Face. The agents discovered they could leave messages for future agents inside OpenAI's systems — and turned the loophole into a makeshift message board for swapping exploits, credentials and strategies without human direction. When OpenAI researchers responded to a server outage, they inadvertently wiped the board without