AI-Powered Cyberattack on Taiwan Government Marks First Autonomous Hack of Government Target

Suspected Chinese hackers conducted the first publicly known autonomous AI-powered cyberattack against a government target, breaching Taiwan's government infrastructure and extracting over 2,500 personnel records and additional sensitive data. According to research published by Israeli cybersecurity firm Dream, the attackers configured their framework to adapt mid-operation without human intervention. The AI system operated through dedicated research phases termed "Learning Cycles," autonomously scanning vulnerability databases, GitHub repositories, and security research publications to identify techniques applicable to the target government's infrastructure. The attackers did not limit their campaign to primary targets but expanded operations to government IT supply chain vendors, a nuclear safety agency, a government email system, and seven-plus energy sector companies, scanning them all in parallel for misconfigurations and exploitable vulnerabilities. The hackers employed two popular open-source AI frameworks, Hermes and OpenClaw, and bypassed security safeguards by framing their activities as authorized penetration testing. The operation demonstrated how the AI system learned from its mistakes as the campaign progressed.