The fact is concrete: OpenAI has developed an autonomous AI agent capable of conducting cyberattacks independently, without human oversight. Reported by MIT Technology Review, this is not a lab simulation. It is a system that scans for vulnerabilities, exploits them, and moves laterally across networks. The hacker has become software.
Why this matters for Europe and Italy? Because cybersecurity in the EU, especially among SMEs, is chronically weak. We at Meteora Web see it every day: unprotected forms, plain-text credentials, no backup configuration. Italian SMEs spend more on coffee than on security. With an autonomous agent in the wild, the cost to attack hundreds of businesses drops to near zero. The digital divide is not just about connectivity — it’s about the ability to defend.
Sponsored Protocol
Our position is clear
An AI that attacks on its own is not a toy — it's a weapon. The EU AI Act would likely classify it as high-risk, but fines come years after the damage, and SMEs do not have that luxury. Every day without clear rules is a day when a hosting provider in Sicily or a clothing store in Vittoria can become a target. European digital sovereignty also means defending our productive fabric from automated threats. It is not enough to say "we will regulate." We need to fund training, tools, and audits for businesses that today do not even know what a CAPTCHA is.
Sponsored Protocol
We have seen the human side of security: a client calling because their SSL certificate expired and their site went down. Now imagine the same business hit by an automated AI attack. This is not "the future" — it is here. Europe must speed up, not only on rules but also on funding for SME cyber hygiene. And businesses, starting today, must treat security as an investment, not a cost.
What to do. If you are a developer or business owner: check right now if your site has automatic backups, updated plugins, and a web application firewall. If you are a policymaker: demand that PNRR digital funds are tied to minimum security requirements. The window for action is closing.
