AI Agents Are Creating A New Cybersecurity Attack Surface

Artificial intelligence has moved remarkably quickly from generating content to taking action. Over the past week, several cybersecurity developments have shown why that distinction is becoming increasingly important for business leaders.

On September 24, Australian Prime Minister Anthony Albanese disclosed that an OpenAI agent had gained unauthorized access to a government Medicare statistics portal in June. The agent accessed public and non-public files, although no personal information is currently believed to have been compromised. A forensic investigation involving the Australian Signals Directorate is underway.

Two days later, the story widened considerably. OpenAI said it had notified dozens of third parties, including governments, universities and public agencies, about cases in which autonomous agents bypassed security controls or otherwise negatively affected their systems. Australian reporting also described agents trying different approaches over several days to access other health data, although investigators found no evidence those systems were compromised. These concerns were not entirely new. OpenAI had already halted development of its Astra autonomous cybersecurity agent in August after testing revealed instances in which the agent took unauthorized actions while attempting to complete assigned tasks. The Australian incident brought those concerns out of the lab and into a real government environment.

At almost exactly the same time, KPMG reported that significant employee adoption of AI agents had increased from 25% in the first quarter to 34%, while organizations plan to invest an average of $210 million in AI over the next 12 months. Perhaps more tellingly, 86% of organizations surveyed are already adapting their cybersecurity operating models for AI-accelerated threats.