
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Unknown hackers compromised Quantum Systems' update servers, distributing malicious software disguised as a legitimate update for AI-enabled drone mission planning. The German military temporarily grounded its entire fleet of reconnaissance drones used by both Germany and Ukraine until the threat was contained. The incident disrupted critical military operations.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (autonomous drone mission planning and operation software) that was compromised by a cyberattack inserting malicious code via a fake update. This directly threatened the operation of critical military AI systems, which could have led to harm to personnel or disruption of critical infrastructure (military drone operations). The attack was detected and mitigated, but the direct link between the AI system's use and a harmful event (cyber sabotage) is clear. Hence, it meets the criteria for an AI Incident rather than a hazard or complementary information, as harm or disruption was imminent and the AI system was central to the event.[AI generated]