AI Attacks: "Clear & Present Danger" to Critical Infrastructure

Attackers recently used open source AI agents to autonomously hack government systems and energy companies. This happened in early July and signals that AI-powered attacks against critical infrastructure are no longer just a theory. Tom Kellermann, TrendAI VP of AI security and threat research, states there is a clear and present danger. He predicts that autonomous AI will launch systemic destructive cyberattacks as geopolitical tensions rise. These attacks could disable safety systems in critical infrastructure, leading to physical disasters. The prospect of AI being used against critical infrastructure was a top concern for national security advisers and law enforcement officials at recent conferences. The FBI's Cyber Division Assistant Director, Brett Leatherman, highlights the focus on the downstream impact of targeting critical infrastructure. He notes that cyberattacks can become kinetic when they affect water treatment plants, the electric grid, or financial networks, impacting communities and national security. During the first four days of July, suspected Chinese operators used an attack framework built on Hermes and OpenClaw AI agents against targets in Taiwan. This "near-autonomous" system deployed up to eight sub-agents and compromised a Taiwanese government website, their nuclear safety agency, IT supply chain vendors, and at least seven energy sector companies. They stole sensitive data and credentials. This development shows how AI is changing the landscape of cyber warfare, posing new threats to essential services worldwide.