Threat actors are giving AI agents a bigger role in cyberattacks - IT Security News
2026-09-08
IT Security News - cybersecurity, infosecurity news
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Google's Threat Intelligence Group reports that threat actors are increasingly using autonomous AI agents to automate cyberattacks, including credential theft, software supply chain compromises, and extortion. These AI-driven attacks, observed globally in 2025-2026, have enabled rapid breaches, theft of proprietary AI data, and large-scale harm to organizations with minimal human involvement.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions AI agents automating parts of cyberattacks, including credential theft, which is a direct harm to individuals and organizations. The AI systems are used maliciously, leading to realized harm such as theft and security breaches. This fits the definition of an AI Incident because the AI system's use has directly led to harm (violation of rights and harm to property).[AI generated]