Cyberattack Wave Driven by AI Spurs Global Scramble for Defenses

Security officials and technology firms are grappling with a burst of cyber intrusions that specialists link to fast-improving artificial intelligence, after attacks in recent weeks disrupted retailers, emergency services and a major cryptocurrency exchange. The warning came as industry and government figures gathered at a telecommunications conference in Doha, where the spread of intelligent agents across networks was a central theme.

From Hijacked Freezers to a Record Theft

In Europe, refrigerators and freezers in shops across Belgium, Estonia, Ireland, Finland, Luxembourg, the Netherlands and Sweden were remotely manipulated, with some units reaching temperatures as high as 50 degrees Celsius. A wholesale business in London saw a panel reading 150 degrees Celsius before its owner disconnected the cooling equipment from the internet. French blood bank refrigeration systems were also affected, according to accounts of the incidents.

The refrigeration sabotage was one of several events in a short span. On October 30, the cryptocurrency exchange Binance lost about $6.3 billion in what was described as a record heist. Two days later, hackers compromised Ukraine's emergency alert app and sent residents of Kyiv a false notification of a nuclear strike. A French bank also had funds diverted through a rapid burst of fraudulent transactions, and databases including Denmark's population registry and files at US law enforcement agencies were breached, prompting Japan's government to declare a cybersecurity state of emergency.

Analysts have taken to calling the period Black October, a label that has circulated widely as companies race to strengthen their digital defenses. Much of the concern centers on the pace at which AI tools can now surface software weaknesses. In October, AI was used to find a critical vulnerability in PHP, the programming language behind roughly 70 percent of the world's websites. The flaw became public before fixes could be distributed, forcing many portals, including Brazilian government services, to go offline temporarily while repairs were made.

Why the Threat Is Growing

Richard Horne, who leads the UK's National Cyber Security Centre, said the recent disruption could mark only the start of a much larger shift. He pointed to the volume of undisclosed vulnerabilities and said the most serious near-term risk is a steep rise in the number of incidents, adding that the past few months already show signs of that trend. The agency's message is that further disruption should be expected.

The assessment follows years of accumulating exposure. Remote work, a growing population of internet-connected devices and the mainstreaming of cryptocurrencies have widened the attack surface, while AI has acted as an accelerant. Anthropic chose in April not to release its Mythos model publicly, restricting access to a select group of financial and technology partners so they could close defensive gaps, and rival OpenAI later took a similar approach.

For the cybersecurity workforce, the shift raises the value of skills in vulnerability analysis, incident response and the safe deployment of AI agents. Security Affairs noted in its latest roundup that AI agents can automate analysis, probe large data sets and accelerate offensive operations, while also improving threat detection and response. That dual use puts a premium on professionals who can supervise automated tools rather than simply run them.

The same tension was visible at MWC26 Doha, where Merouane Debbah, who heads 6G research programs at Khalifa University, said networks will increasingly serve intelligent agents alongside human users. Operators and vendors at the event argued that resilient infrastructure and coordinated standards will be needed as more automated systems depend on connectivity.

What to Watch Next

Attention now turns to how quickly organizations patch known flaws and whether regulators tighten reporting rules for attacks on connected equipment. Specialists warn that hospitals, airports and power stations could be among the next targets. The response from governments and companies to the October events will be an early test of whether defenses can keep pace with the technology available to attackers.