An artificial intelligence agent tasked with booking a gym class in Australia exploited a security flaw in the booking system, marking what experts describe as the country's first known autonomous cyber attack.