AI systems are fully capable of carrying out attacks against infrastructure


Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario – finding and attacking critical operational technology and industrial equipment, and shutting down access to water, power, and other daily life necessities.

If this happens, defenders may only have minutes to detect and block it, according to a Booz Allen Hamilton report.

The consulting firm’s operational technology (OT) lab tested eight scenarios to examine advanced models’ capabilities within an autonomous, AI-enabled OT attack chain. The models achieved the objectives across all eight scenarios, turning digital access into physical actions – in one case finding and moving a robotic arm in just minutes.

Read more…
Source:  The Register News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • “Reprompt” attack lets attackers steal data from Microsoft Copilot

    January 15, 2026

    Researchers found a method to steal data which bypasses Microsoft Copilot’s built-in safety mechanisms. The attack flow, called Reprompt, abuses how Microsoft Copilot handled URL parameters in order to hijack a user’s existing Copilot Personal session. Copilot is an AI assistant which connects to a personal account and is integrated into Windows, the Edge browser, and ...

  • ‘ZombieAgent’ zero click vulnerability allows for silent account takeover

    January 9, 2026

    OpenAI recently introduced a new feature for ChatGPT which, unfortunately, also puts users at risk of data exfiltration and persistent access. In December 2025, a feature called Connectors finally moved out of beta and into general availability. This feature allows ChatGPT to connect to numerous other apps, such as calendars, cloud storage, email accounts, and similar ...

  • FBI: Senior U.S. Officials Continue to be Impersonated in Malicious Messaging Campaign

    December 19, 2025

    This is an update to Public Service Announcement I-051525-PSA, released May 15, 2025, which can be found here. Activity dating back to 2023 reveals malicious actors have impersonated senior U.S. state government, White House, and Cabinet level officials, as well as members of Congress to target individuals, including officials’ family members and personal acquaintances. If ...

  • The AI Chip Arms Race: How China Built Its Own “Manhattan Project”

    December 17, 2025

    In a high-security laboratory in Shenzhen, China, scientists have developed a prototype machine capable of producing advanced semiconductor chips crucial for technologies such as artificial intelligence and military applications, a goal that the U.S. has long sought to prevent. This prototype, completed in early 2025 and currently in the testing phase, occupies almost an entire factory ...

  • NMFTA Releases 2026 Transportation Industry Cybersecurity Trends Report

    December 16, 2025

    The National Motor Freight Traffic Association, Inc. (NMFTA)™ announced the release of its 2026 Transportation Industry Cybersecurity Trends Report, the latest annual assessment of cyber threats, adversary tactics, and resilience trends shaping the future of freight and logistics in North America. Building on years of research and industry engagement, the 2026 report expands NMFTA’s flagship cybersecurity ...

  • AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

    December 8, 2025

    Hunting high-impact, advanced malware is a difficult task. It becomes even harder and more time-consuming when defenders focus on low-detection or zero-detection samples. Every day, a huge number of files are sent to platforms like VirusTotal, and the relevant ones often get lost in all that noise. Identifying malware with low or no detections is ...