State-linked hacking crews more than doubled their attack volume once they started handing the boring parts to a model
The Taiwanese research firm TeamT5 told Bloomberg on Monday that state-affiliated cyber groups have more than doubled the number of attacks they run since they began delegating routine work to AI models and using them to write malicious software. DeepSeek's open models are the favourite, the firm says, because they are cheap, easy to customise and carry light safety guardrails. One documented case shows the shape of it: a Chinese-speaking operator wired DeepSeek into the open-source Hermes Agent framework and, from a single instruction sent over Telegram, had it hunt for internet-facing systems, pick public exploits and try them against more than 460 targets.
Why it mattersThe worry about AI and offensive security has mostly been framed as capability — will a model find a novel exploit a human could not? This finding is about throughput instead, and it is the more immediate problem. The same crew, the same skills, the same known exploits, simply run at twice the rate because the tedious reconnaissance no longer costs human hours. Defence budgets and staffing were sized against the old rate.
Read in the app — free, in 9 languages
Related stories
Firms funding a $1.8 billion biology dataset get to use it first.2026-10-09Google's new office agent also runs on rival Anthropic's Claude.
2026-10-09A sign error wiped out three of OpenAI's 722 new maths papers.
2026-10-08Buterin says AI maths could break crypto before quantum computers do.
2026-10-08Manus is worth double what it paid to buy itself back from Meta.
2026-10-08