
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Hackers are increasingly using advanced AI models to discover and weaponize zero-day software vulnerabilities, enabling faster and more effective cyberattacks. Google and security experts confirm AI-assisted attacks have already bypassed security measures, targeting critical infrastructure and open-source tools, prompting urgent defensive measures in Taiwan and globally.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves AI systems (advanced AI models like Claude Mythos Preview and GPT-5.5) used in cybersecurity to find and exploit vulnerabilities. The use of AI in automating attacks and accelerating exploitation directly increases the risk of harm to critical infrastructure and organizations, fulfilling the criteria for an AI Hazard. Although no specific realized harm is detailed, the article emphasizes the plausible and credible future harm from AI-enabled cyberattacks, including exploitation of zero-day vulnerabilities before public disclosure. Therefore, this is best classified as an AI Hazard rather than an AI Incident, as the harm is potential but not explicitly reported as having occurred yet.[AI generated]