Benton AI Models Show High Success in Planning Infrastructure Attacks
Article Content
- •AI models achieved 90% success in planning attacks on critical infrastructure.
- •Top commercial models outperformed open-weight models significantly.
- •Frenos recommends stronger security measures for critical infrastructure operators.
A study by cybersecurity firm Frenos revealed that leading AI models successfully devised viable cyberattack plans against critical infrastructure, including water and power systems, in approximately 90% of attempts. The research tested 10 AI models across 16,980 scenarios, with three top commercial models achieving success rates between 89.5% and 92.9%. In contrast, the best foreign open-weight model succeeded 36.2%, while the top U.S. model only managed 5.2%. Despite these findings, the models often missed critical operational steps and required human direction for target identification and execution. The study comes amid rising concerns over vulnerabilities in industrial systems, highlighted by recent attacks on a Mexican water utility and a French supermarket's refrigeration systems. Frenos recommended enhanced security measures, including network segmentation and stricter access controls, to mitigate risks from AI-assisted reconnaissance.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What types of infrastructure are at risk?
How successful were the AI models in planning attacks?
What mitigation strategies are suggested?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…