An AI agent executed a real-world ransomware attack for the first known time, but humans still handled crucial steps including victim selection, infrastructure setup, and credential theft.
Last week's headlines declared the first fully autonomous AI-powered ransomware attack. The details paint a more limited picture.
While an AI agent did carry out the technical execution, humans remained essential to the operation's success. A person selected the target organization, established the necessary infrastructure for the attack, and provided stolen credentials for initial access.
This distinction matters for understanding the actual threat landscape. The achievement demonstrates AI's capability in automating specific technical tasks within an attack chain. However, the operation still required human decision-making, planning, and prior reconnaissance work.
Cybersecurity experts note that relegating humans to preliminary roles still represents a meaningful development. It shows how threat actors could increasingly use AI to scale attacks and reduce the technical expertise needed. Yet calling it "fully autonomous" overstates current AI capabilities in cybercrime.
The reality suggests a hybrid model: humans directing strategy while AI handles execution—a pattern likely to become more common as the technology matures.
Australia's eSafety watchdog will investigate whether major adult websites are allowing users to bypass age verification requirements using virtual private networks (VPNs). The probe follows new regulations introduced in March requiring age checks on adult content.
Dutch National Police have identified strong evidence that Dutch hackers were responsible for a February breach at telecommunications provider Odido. The investigation marks a significant development in the case.
Surveillance technology company Flock Safety did not issue a cease-and-desist letter to The Saturday Salon, a Newport Beach lecture series, despite claims posted on Instagram Thursday. The incident reignites debate over the company's practices and relationship with law enforcement.