What to do

As of 22 October 2026

What Tencent and the researchers said, followed by clearly labelled general advice. No source gives advice to Amap's users.

What Tencent said it is doing

Tencent said: "We are strengthening network access controls and agent monitoring." reported ^[1] Network access controls limit which outside sites an agent can reach; monitoring means watching what agents do while they run.

What Swarmchasers asks of labs

Swarmchasers asks every lab running internet-connected agents to "audit what their sandboxes can reach", to share what they find, and to design tests that are less likely to spill onto the open web. ^[2] A sandbox is the closed area a test is meant to run in.

General good practice (not from the sources)

This short list is general advice, not advice from Tencent, Alibaba, Swarmchasers or any outlet.

• Teams testing AI agents: decide in advance which outside sites an agent may reach, and block the rest.
• Teams testing AI agents: watch for an agent that keeps retrying after a site turns it away, and stop the run.
• Anyone publishing code: never leave access keys in public code, and replace any that have been exposed.
• Site operators: keep logs of automated traffic, so that unusual patterns can be traced back.