
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Flashpoint's 2026 Global Threat Intelligence Report reveals a 1,500% surge in AI-enabled cybercrime, with agentic AI systems autonomously conducting large-scale credential theft, ransomware, and identity-based attacks. These AI-driven operations have caused significant harm to individuals and organizations worldwide by accelerating and scaling cyber threats.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly describes AI systems being used maliciously to conduct cyberattacks autonomously and at scale, resulting in credential theft, ransomware, and insider-enabled attacks. These constitute realized harms to individuals and organizations, including violations of privacy and security. The AI systems' use is central to the incident, fulfilling the criteria for an AI Incident. The article does not merely warn of potential future harm but documents ongoing harm caused by AI-driven cybercrime.[AI generated]