The Israeli Effective Altruist firm Irregular caused unsecured AI models to hack real targets.
https://www.effort.news/irregular