The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A J.P. Morgan report reveals that AI is enabling attackers to discover and exploit software vulnerabilities within a single day of disclosure, dramatically increasing cyber risks. Organizations struggle to patch flaws quickly enough, resulting in more breaches and heightened threats to cybersecurity worldwide.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly states that AI systems have directly led to a significant reduction in the time between vulnerability disclosure and exploitation, resulting in increased cyberattacks and breaches. This constitutes realized harm to property and communities (harm category d). The involvement of AI in both the discovery and exploitation of vulnerabilities is clear, and the harms are ongoing and materialized, not merely potential. Therefore, this event qualifies as an AI Incident due to the direct and indirect harms caused by AI-enabled cyber exploitation.[AI generated]