The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A Chinese-developed AI tool, ARTEX, was used in cyberattacks breaching 16 South Korean banks and targeting around 80 Japanese companies, causing significant data leaks. The AI system autonomously identified vulnerabilities and executed exploits, exposing sensitive information and highlighting the growing threat of AI-driven cybercrime in East Asia.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions AI systems (Claude Code and other AI agents) being used as tools by attackers in cyberattacks. These attacks have already occurred and caused harm to Japanese companies, fulfilling the criteria for an AI Incident. The AI systems' use in identifying vulnerabilities and launching attacks directly contributed to the harm. Therefore, this is not merely a potential risk (hazard) or complementary information but an actual AI Incident involving realized harm through malicious use of AI.[AI generated]