A malicious open-source AI agent called Hermes tried to scan for vulnerabilities and escalate access on a Thai ministry network in mid-July. It did not succeed, and the file was removed and the agent blocked. The National Cyber Security Agency (สกมช.) says leaked passwords and source code, if combined with AI tools, could be a serious threat, and it plans an AI agent to monitor logs by October. For a small business: change reused passwords, turn on two-factor login for email and banking, and keep software and systems updated. The article gives no specific rule or deadline for private firms.