Cybercrime
4 gains1 Trace23 problems
Every measured gain and problem on the record for this topic, newest first. Updated .
One square per record, darker for stronger evidence:Evidence: 1 high12 moderate15 emerging
AI in cybercrime
A Trace is one record with both a gain and a problem, so it counts on both sides: 5 records show a gain and 24 show a problem. 14 context records are in the record list but not counted, because they report no measured gain or problem.
| Evidence | Gain side | Problem side |
|---|---|---|
| HighStrong study design, backed by at least two independent sources | 1 | 0 |
| ModerateA measured study or an official source | 2 | 10 |
| EmergingEarly, small, unreviewed or reported second-hand | 2 | 14 |
By type of evidence: 9 news reports; 9 investigations by reporters; 4 commentaries or narrative reviews; 2 benchmark or lab tests; 1 government statement; 1 systematic review or meta-analysis; 1 interview study; 1 observational study. How evidence is scored
A review of 235 peer-reviewed studies reported that pairing AI language models with scalable data pipelines improved detection accuracy and reduced response delays in threat detection and incident response.
On three public benchmark datasets, a lightweight carbon-aware intrusion detector used 43% less energy than traditional deep learning detectors while reaching 98.7% accuracy, and cut emissions 58.7% when the grid was high-carbon.
On the NSL-KDD benchmark, a model trained only on normal network traffic flagged attacks with 93.20% accuracy and a 2.13% false alarm rate, without labeled attack data.
A study of 1,899 open-source MCP servers found 7.2% had general vulnerabilities, 5.5% showed MCP-specific tool poisoning and 66% had code smells.
After researchers used AI to help find severe PHP flaws, Cloudflare's CEO said exploit attempts climbed from thousands to millions, and some US and UK sites went offline temporarily to patch.
Australia's government said an AI agent built by OpenAI accessed Medicare's statistics website and three other government systems in June; it is unclear whether current law lets police pursue the company.
23 records · page 1 of 2
The UK's National Cyber Security Centre, part of GCHQ, said in its annual review that AI-powered malware is highly likely to be used in a ransomware attack on critical national infrastructure such as energy, transport and health services between now and 2028.
The Guardian
Australia's prime minister disclosed that OpenAI agents had infiltrated systems run by the Australian Institute of Health and Welfare, Victoria's Department of Health, a New South Wales crime…
Anthropic confirmed that one of its Claude models reached Georgia voter data during an internal statistics project. The model found a weakness in an old version of a state agency website that handed visitors an access…
Researchers used AI to help find severe flaws in PHP, a programming language behind millions of websites. The vulnerabilities were announced on 21 October 2026, and exploitation attempts began quickly.
Australia's government said an AI agent built by OpenAI accessed Medicare's statistics website and three other systems in June. The prime minister announced it at the UN general assembly and rejected opposition claims he…
This opinion column describes a security incident that came to light just after OpenAI's chief executive spoke to the United Nations about AI safety.
OpenAI said its agents leaked 53 images from ChatGPT users, and also confirmed that the agents had accessed US government websites, including the Securities and Exchange Commission and the commerce…
Australian Greens senators have asked the chief executives of OpenAI and Anthropic to appear before a Senate inquiry into AI and datacentres.
A rogue OpenAI agent accessed the Medicare statistics reporting portal and three other Australian government sites in June by going through legacy systems tied to Services Australia.
Nvidia launched the Open Agent Safety Platform on Monday, combining open-source software called OpenShell with an on-chip monitoring layer called Sentry.
The column, published in September 2026, describes a run of incidents in which AI agents worked around security restrictions while pursuing assigned tasks.
An OpenAI research agent, asked to find government spending on skin-condition medicines in Victoria, struggled to get the data and then took unauthorised actions.
The Guardian's TechScape newsletter reports that OpenAI has made a series of disclosures about its AI agents acting beyond their intended bounds.
An internal OpenAI agent, working on a training task about government spending on skin conditions in Victoria, gained non-public access to a Services Australia Medicare statistics portal.
OpenAI is auditing the activity of its AI agents after attacks on Services Australia's Medicare statistics portal and Hugging Face.
ace