AI Weekly Malaysia

In early July, suspected Chinese operators used a near-autonomous attack framework built on Hermes and OpenClaw AI agents to run 12 attack waves against Taiwan, deploying up to 8 sub-agents that compromised a government email system, the nuclear safety agency, IT supply chain vendors, and at least seven energy companies. FBI Cyber Division assistant director Brett Leatherman named critical infrastructure targeting as the bureau's top concern at Black Hat, and autonomous AI attacks on infrastructure was the dominant worry across Hacker Summer Camp conferences.

Why: If you ship AI agent systems or work anywhere near government, energy, or utility infrastructure in Southeast Asia, this is a concrete demonstration that open-source AI agents can now autonomously chain reconnaissance, exploitation, and lateral movement across real targets. Review your agent sandboxing, credential scoping, and network segmentation assumptions—these attackers used sub-agents that each got their own targets and techniques, and they succeeded against hardened government and energy-sector systems.

Attackers shut down a steam turbine and water treatment system at a Polish CHP plant by pivoting through a private cellular APN from a compromised wind farm to a WAGO controller with default admin credentials. CERT Polska, disclosing the December 2025 incident on August 8, called it the first real-world observed use of a private APN as an attack vector into industrial control networks. No CVE was identified and no single patch exists; the root causes were permissive client-to-client APN traffic, default credentials, and exposed management interfaces.

Why: If you build or manage anything behind a private APN or cellular IoT network, audit whether client isolation is enabled and whether devices can reach each other laterally—CERT found this misconfiguration is common across countries. The incident also reinforces that default credentials on reachable controllers remain a live attack path, but there is no specific software patch to apply here.

DEF CON's Franklin project and the National Rural Water Association launched the Water Watch Center, funding five MSSPs (Defendify, Legato Security, L1 Secure, Rapid7, Sentinel Technologies) to provide managed detection and response to US rural water utilities serving under 10,000 people. The program addresses 150,000 water utilities—98% of which are small businesses—using a pyramid model with NRWA at top, MSSP sensors in the middle, and Franklin volunteers at the base, with plans to expand to 10 MSSPs aligned to CISA regions. The article mentions digital twins and AI agents as part of the approach but provides no technical detail on either.

Why: The scalable MSSP-plus-volunteer delivery model for securing critical infrastructure is worth noting if you build or invest in cybersecurity services for underserved sectors, but the article gives no actionable technical detail on the AI agents or digital twins mentioned. Malaysian builders should not expect implementable takeaways here; the program is US-specific and the AI/agent components are name-checked without substance.