
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A March 2026 report by Check Point Software Technologies reveals Bosnia and Herzegovina faces the highest risk from AI-driven cyberattacks. Rapid AI adoption in public and private sectors has outpaced cybersecurity investments, resulting in vulnerabilities and ongoing exposure to botnets, ransomware, and other AI-enabled threats.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions AI systems being used maliciously by cyber attackers to conduct autonomous botnet attacks and ransomware campaigns, which have already caused vulnerabilities and exposures in critical digital infrastructure across several countries. The harms described include disruption and potential damage to critical infrastructure and digital assets, fitting the definition of harm to property and communities. The AI systems' use in cyberattacks is a direct cause of these harms. Hence, this is an AI Incident rather than a hazard or complementary information, as the harms are ongoing and realized.[AI generated]