The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A Kazakhstan-linked hacking group, Silent Lynx, used autonomous AI agents—Hermes and DeepSeek—to steal over 2,000 sensitive government and defense documents from Tajikistan. The AI systems autonomously planned and executed cyberattacks, highlighting the growing use of AI in sophisticated cyber espionage. The incident was uncovered by cybersecurity firm CloudSEK.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly states that an AI system was used to autonomously conduct a cyber espionage operation that successfully stole sensitive government documents, which is a direct harm to property and potentially to communities and national security. The AI system's development and use were central to the incident, fulfilling the criteria for an AI Incident. The harm is realized, not just potential, and the AI system's role is pivotal in the attack's success.[AI generated]