Latest
  1. Google releases Gemini Decision 1, a model that scores up to 1,000 questions in one pass
  2. Google DeepMind releases AlphaGenome 2 to predict DNA variant effects in human cell types
  3. Torus raises $500m to run AI computing on spare grid power
  4. Cyprus approves National AI Strategy 2032, leaving funding to a later plan
  5. Meta and TikTok join Google in opposing Indonesia’s AI copyright bill
  6. UK’s Sovereign AI fund backs chip firm Fractile in a £500m-plus round
  7. Russia, China and US discuss curbs on AI in nuclear arsenals, report says
  8. CloudSEK says Silent Lynx spies ran an AI agent to steal Tajik government documents

Latest / Defence and security

IncidentDefenceGovernmentTajikistan Turkmenistan UzbekistanConfirmed

CloudSEK says Silent Lynx spies ran an AI agent to steal Tajik government documents

See how this story connects

Source: CloudSEKAlso reported by Reuters via teiss

CloudSEK found an exposed open directory belonging to Silent Lynx, a Central Asia-focused espionage cluster, holding its tooling and data from intrusions through October 2026. The operator gained domain-level access to Tajikistan’s national railway network and collected government documents from Tajikistan’s electronic document management platform, including thousands routed through the Ministry of Defence. A self-hosted AI agent built on the open-source Hermes framework and running mostly on DeepSeek models handled reconnaissance, collection and log cleanup, and lures impersonating Turkmenistan Railways were built and tested in October 2026.

Why it matters

CloudSEK says the operator pre-approved the agent’s destructive commands and tasked it from a phone through Telegram while it worked inside Central Asian government networks.

When
11 Nov 2026
ID
WTA-N-2026-0854
Where
Tajikistan, Turkmenistan, Uzbekistan
Who
CloudSEK
System
Tajikistan’s national railway network and the government’s electronic document management platform
Operator
Tajik railway and government bodies
Type
espionage intrusion by the Silent Lynx cluster, with a self-hosted AI agent running reconnaissance, collection and log cleanup
Status
found through an exposed server holding data through October 2026; lures for Turkmenistan built and tested; disclosed by CloudSEK, 11 Nov 2026 · Incident ledger

Summary written with AI by wheresthe.ai, from CloudSEK and the reporting credited above. Checked against the source on 11 Nov 2026.

Read the original at CloudSEK

Source copy: saved on 11 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Earlier in this Storyline: What led hereGovernment Linux servers targeted with SysGoRAT and suspected AI-generated scripts

Cite this story

WTA-N-2026-0854: “CloudSEK says Silent Lynx spies ran an AI agent to steal Tajik government documents.” wheresthe.ai, 11 Nov 2026. https://wheresthe.ai/d/tj-cloudsek-says-silent-lynx-spies-ran-an-ai-agent-to-steal-2026-11/ (source: CloudSEK).

Spotted an error? Email [email protected].