{"id":907816,"date":"2026-09-27T21:44:12","date_gmt":"2026-09-27T21:44:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/907816\/"},"modified":"2026-09-27T21:44:12","modified_gmt":"2026-09-27T21:44:12","slug":"australia-is-run-on-legacy-systems-that-ai-agents-can-easily-exploit-former-un-cyber-negotiator-warns-ai-artificial-intelligence","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/907816\/","title":{"rendered":"Australia is run on legacy systems that AI agents can easily exploit, former UN cyber negotiator warns | AI (artificial intelligence)"},"content":{"rendered":"<p class=\"dcr-1s160rg\">Ageing computer systems used throughout Australia\u2019s government and large sections of the economy are easily exploited by AI agents, increasing the risk that sensitive information could be compromised, Australia\u2019s former chief UN cyber negotiator has warned.<\/p>\n<p class=\"dcr-1s160rg\">As the government urgently undertakes a forensic investigation into a rogue <a href=\"https:\/\/www.theguardian.com\/technology\/openai\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">OpenAI<\/a> agent accessing Medicare data, the AI expert and Tech Policy Design Institute executive director, Johanna Weaver, said huge vulnerabilities existed across older IT systems.<\/p>\n<p class=\"dcr-1s160rg\">\u201cIt is old legacy systems that present the huge vulnerabilities, because large amounts of information and data is stored on these systems that have been around since the beginning of the internet,\u201d Weaver said.<\/p>\n<p class=\"dcr-1s160rg\">\u201cThey aren\u2019t updated and maintained because either people have forgotten about them or it\u2019s too costly, or there aren\u2019t updates for systems any more. That creates an enormous vulnerability, and that is what these agents are going to be exploiting.\u201d<\/p>\n<p class=\"dcr-1s160rg\">Monday\u2019s meeting of federal cabinet will discuss the fall out, as OpenAI said on Sunday it had <a href=\"https:\/\/www.theguardian.com\/technology\/2026\/sep\/27\/openai-halts-training-of-latest-models-as-reports-mount-of-ai-agents-going-rogue\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">paused training<\/a> of its latest artificial intelligence models amid growing reports of its agents going rogue.<\/p>\n<p class=\"dcr-1s160rg\">After the Australian hack was revealed on Thursday, the company disclosed moves to review several incidents in which OpenAI agents searching American government websites went far beyond what handlers asked of them.<\/p>\n<p class=\"dcr-1s160rg\">OpenAI said it would resume training \u201conly when we are confident that we have additional safeguards\u201d in place, adding that it expected it would have to \u201chit pause\u201d again as AI developed and other issues emerged.<\/p>\n<p class=\"dcr-1s160rg\">Weaver, who completed her term at the UN in 2021, said thorough investigation and remediation efforts would be required to close vulnerability gaps, calling on AI companies not to release models they could not control on the internet.<\/p>\n<p class=\"dcr-1s160rg\">\u201cWe are not powerless. We can decommission old systems and move sensitive data of legacy systems. Think of it as a digital spring clean,\u201d she said.<\/p>\n<p class=\"dcr-1s160rg\">\u201cWe must also draw a line in the sand and say that, if companies cannot control their AI systems, they shouldn\u2019t release them. And if they do, and those systems cause harm, companies must be held accountable.\u201d<\/p>\n<p class=\"dcr-1s160rg\">Government systems are commonly run on programs dating back decades, sometimes due to the cost and complexity of replacing them.<\/p>\n<p class=\"dcr-1s160rg\">The finance and government services minister, Katy Gallagher, said last week the agent had accessed Medicare statistics reporting service portal, as well as three other government sites, through legacy systems linked to Services Australia.<\/p>\n<p class=\"dcr-1s160rg\">On Sunday a spokesperson said the agency was working with the Australian Signals Directorate to track the AI agent\u2019s movements in the June incident.<\/p>\n<p><a data-ignore=\"global-link-styling\" href=\"#EmailSignup-skip-link-14\" class=\"dcr-76akua\">skip past newsletter promotion<\/a>Free newsletter |Every weekday<\/p>\n<p class=\"dcr-vf9hps\">Sign up to Politics, really<\/p>\n<p class=\"dcr-djbwnz\">Our political team brings you up to speed on the stories that really matter and what they mean for you<\/p>\n<p><img src=\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/09\/1790545452_623_Politics_really_trail_1x1.jpg\" alt=\"\" loading=\"lazy\" decoding=\"async\" class=\"dcr-gx9601\"\/><\/p>\n<p id=\"EmailSignup-skip-link-14\" tabindex=\"0\" aria-label=\"after newsletter promotion\" role=\"note\" class=\"dcr-76akua\">after newsletter promotion<\/p>\n<p class=\"dcr-1s160rg\">A cross-government rapid review is under way, with the prime minister\u2019s department, the ational cybersecurity coordinator and the Australian AI Safety Institute all involved.<\/p>\n<p class=\"dcr-1s160rg\">Axios reported on Sunday that OpenAI, Anthropic and security researchers were investigating <a href=\"https:\/\/www.axios.com\/2026\/09\/26\/openai-anthropic-thousands-ai-security-incidents\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">tens of thousands<\/a> of incidents globally in which frontier models undertook problematic or unexpected actions.<\/p>\n<p class=\"dcr-1s160rg\">Incidents included bypassing safety guardrails, creating message boards, escaping testing systems, hijacking websites, so-called \u201cself prompting\u201d and the bypassing of monitors.<\/p>\n<p class=\"dcr-1s160rg\">OpenAI also halted development of its models in July, after the disclosure of a cyber-attack targeting AI startup Hugging Face.<\/p>\n<p class=\"dcr-1s160rg\">Growing scrutiny of AI models follows calls from the heads of OpenAI and rival Anthropic for an industry slowdown.<\/p>\n<p class=\"dcr-1s160rg\">The shadow defence minister, James Paterson, called on the companies to make executives available to answer questions in a parliamentary inquiry into AI.<\/p>\n<p class=\"dcr-1s160rg\">The chair, Greens senator Sarah Hanson-Young, called on OpenAI\u2019s Sam Altman and Anthropic\u2019s Dario Amodei <a href=\"https:\/\/www.theguardian.com\/australia-news\/2026\/sep\/27\/sam-altman-openai-dario-amodei-anthropic-senate-inquiry-medicare-hack-rogue-ai-agent-leak\" data-link-name=\"in body link\" rel=\"nofollow noopener\" target=\"_blank\">to give evidence<\/a> on Sunday. Hanson-Young\u2019s inquiry is due to resume hearings in Canberra on Thursday.<\/p>\n<p class=\"dcr-1s160rg\">The deputy Liberal leader, Jane Hume, was sceptical that the OpenAI hack should result in legal consequences for the company.<\/p>\n<p class=\"dcr-1s160rg\">\u201cI\u2019m not entirely sure who it is that they\u2019re going to put in cuffs and drag through the city streets and put in the stocks,\u201d the Liberal senator told ABC\u2019s Insiders program on Sunday.<\/p>\n<p class=\"dcr-1s160rg\">\u201cThe real alarm bell that was set off this week is the fact that the only reason we knew about this breach \u2026 is because OpenAI told us.\u201d<\/p>\n<p class=\"dcr-1s160rg\">The Albanese government has defended its response to the incident.<\/p>\n<p class=\"dcr-1s160rg\">\u201cThe fact that we\u2019ve got an artificial intelligence agent gaining unauthorised access to an Australian government website, that of itself is very serious,\u201d the defence minister, <a href=\"https:\/\/www.theguardian.com\/australia-news\/richard-marles--australian-politician-\" data-link-name=\"in body link\" data-component=\"auto-linked-tag\" rel=\"nofollow noopener\" target=\"_blank\">Richard Marles<\/a>, told News 24. \u201cThere\u2019s no hiding that.<\/p>\n<p class=\"dcr-1s160rg\">\u201cThis is the first time this has happened in the context of Australia, and so we\u2019re not shying away from that. In fact, the information that it obtained, was minor in its nature, in as much as that information we\u2019ve now made public anyway \u2013 it wasn\u2019t anyone\u2019s personal data.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Ageing computer systems used throughout Australia\u2019s government and large sections of the economy are easily exploited by AI&hellip;\n","protected":false},"author":2,"featured_media":907817,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[43,44,41,39,42,40],"class_list":["post-907816","post","type-post","status-publish","format-standard","has-post-thumbnail","category-headlines","tag-headlines","tag-news","tag-top-news","tag-top-stories","tag-topnews","tag-topstories"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/907816","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=907816"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/907816\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/907817"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=907816"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=907816"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=907816"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}