The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A Chinese-speaking hacker used AI agents on the Cairn platform to autonomously breach over 100 company websites, including Deere, SharkNinja, and Cummins, across the US, Canada, Australia, and Japan. The AI system enabled rapid, large-scale intrusions with minimal human involvement, highlighting new cybersecurity risks.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly states that AI agents autonomously conducted cyberattacks compromising over 100 companies' websites, resulting in data theft and unauthorized access. The AI systems' use directly led to harm including breaches of security and theft of sensitive data, which are violations of rights and harm to property. The involvement of AI in the development and use of these attack tools is clear and central to the incident. Hence, this is an AI Incident rather than a hazard or complementary information.[AI generated]
