AI Weekly Malaysia

In early July, suspected Chinese operators used a near-autonomous attack framework built on Hermes and OpenClaw AI agents to run 12 attack waves against Taiwan, deploying up to 8 sub-agents that compromised a government email system, the nuclear safety agency, IT supply chain vendors, and at least seven energy companies. FBI Cyber Division assistant director Brett Leatherman named critical infrastructure targeting as the bureau's top concern at Black Hat, and autonomous AI attacks on infrastructure was the dominant worry across Hacker Summer Camp conferences.

Why: If you ship AI agent systems or work anywhere near government, energy, or utility infrastructure in Southeast Asia, this is a concrete demonstration that open-source AI agents can now autonomously chain reconnaissance, exploitation, and lateral movement across real targets. Review your agent sandboxing, credential scoping, and network segmentation assumptions—these attackers used sub-agents that each got their own targets and techniques, and they succeeded against hardened government and energy-sector systems.

An Israeli security firm reports that suspected China-linked hackers executed the first documented end-to-end autonomous cyberattack against Taiwan's government using an open-source-built AI tool that continuously generated effective hack strategies in real-time. This marks a shift from AI-assisted attacks to AI-autonomous attack chains.

Why: If autonomous AI cyberattacks are now operational in the region, builders shipping government or enterprise software in Southeast Asia should expect threat models to change fast. Review whether your security testing, red-teaming, and incident response playbooks account for AI-driven attack chains that adapt in real-time rather than following static exploit patterns.