AI-Powered Cyberattacks Target Autonomous AI Agents and Enterprises

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

CrowdStrike's 2025 Threat Hunting Report reveals that cybercriminals and nation-state actors are weaponizing generative AI to scale attacks, automate malware creation, and conduct sophisticated social engineering. Adversaries are also targeting autonomous AI agents within enterprises, leading to breaches, credential theft, and malware deployment, significantly expanding the attack surface and causing real-world harm.[AI generated]

Why's our monitor labelling this an incident or hazard?

The involvement of AI by threat actors to scale and accelerate attacks, including attacks on autonomous AI agents, implies direct malicious use of AI systems leading to harm such as disruption of critical infrastructure or violation of security. This constitutes an AI Incident because the AI systems' use has directly led to harmful cybersecurity events.[AI generated]
AI principles
Robustness & digital securitySafetyPrivacy & data governanceRespect of human rightsAccountability

Industries
Digital securityIT infrastructure and hosting

Affected stakeholders
BusinessWorkers

Harm types
Economic/PropertyReputationalHuman or fundamental rights

AI system task:
Content generation


Articles about this incident or hazard