# AI cyberattack warnings put website security in focus

> Developers used AI to find a bug affecting most websites; Cloudflare later reported more attempts to exploit it, alongside other AI-related attack warnings.

Oossa · 2026-10-22 · https://oossa.com/en/ai-cyberattack-warnings-put-website-security-in-focus

Web developers used AI to identify a bug that affected the majority of the world’s websites, according to Semafor. Soon afterward, Cloudflare noted a surge in attempts to exploit the opening. The report does not name the bug or say how many attempts Cloudflare observed.

Other warnings point to AI being used in attacks, though details are limited. Microsoft warned that a China-linked hacking group used AI to break into an IT services firm. Commercially available chatbots were also reportedly used in attacks on banks; the report does not name the banks or say whether those attacks succeeded.

## A race to patch vulnerabilities

The incidents highlight a race between companies trying to fix security problems and attackers trying to exploit them. OpenAI calls the time defenders have to act “the defender’s window.” An Information reporter said AI advances may mean that window is close to closing.

The report does not identify the AI systems involved, explain exactly how they were used, or give details about damage from the attacks. It also does not say whether the website bug has been fixed. The warnings describe several different events, not one coordinated campaign.

## The facts

- The bug identified with AI was described as affecting the majority of the world’s websites.
- Cloudflare noted a surge in attempts to exploit the bug after it was identified.
- Microsoft warned that a China-linked hacking group used AI to break into an IT services firm.
- Commercially available chatbots were reportedly used in attacks on banks.

## Why it matters

For web developers and IT teams, the warnings underscore the pressure to fix vulnerabilities before attackers exploit them. For ordinary users, the report confirms no specific outage or data theft, so it is not possible to tell whether anyone’s personal information was affected.

## Sources & references

1. [Web developers raise alarm bells over AI-driven cyberattacks](https://www.semafor.com/article/10/22/2026/web-developers-raise-alarm-bells-over-ai-driven-cyberattacks) – Semafor, 2026-10-22

Last updated: 2026-10-22