Yazılar

MI5 chief warns AI could pose future security risks, but dismisses “Hollywood doom”

The head of Britain’s domestic intelligence agency, MI5, has warned that artificial intelligence systems acting independently of human oversight could one day pose serious national security challenges — though he dismissed notions of a “Terminator”-style apocalypse.

In his annual speech on national threats, MI5 Director General Ken McCallum said that while AI is already being used to strengthen British security operations, it is also being exploited by terrorists, hostile states, and cybercriminals. He said AI tools are helping adversaries spread propaganda, conduct reconnaissance, and manipulate elections.

“But in 2025, while contending with today’s threats, we also need to scope out the next frontier: potential future risks from non-human, autonomous AI systems which may evade human oversight and control,” McCallum said.

He emphasized that his warning was not a prediction of science-fiction-style catastrophe, but a call for preparedness as AI technology rapidly evolves. “Given the risk of hype and scare-mongering, I will choose my words carefully. I am not forecasting Hollywood movie scenarios,” he noted.

McCallum added that while AI may never intentionally mean harm, ignoring its potential dangers would be “reckless.” MI5 and other intelligence agencies are studying the long-term implications of increasingly autonomous systems.

The remarks reflect a broader debate within global intelligence and tech circles about balancing the benefits of AI innovation with the risks of automation and loss of control over powerful systems.

UK’s Capita fined £14 million over 2023 cyber breach affecting 6.7 million people

Capita has been fined £14 million ($18.7 million) by the UK Information Commissioner’s Office (ICO) for failing to protect personal data during a 2023 cyberattack that compromised information belonging to 6.7 million individuals, the outsourcing firm said on Wednesday.

The company, which provides services to UK government departments and major corporations, said the fine was part of a settlement with the ICO. Capita had previously estimated that the breach could cost up to £20 million in financial damages.

The ICO report found that Capita failed to maintain adequate network protections, allowing unauthorized access and privilege escalation, and did not respond properly to early security alerts. The regulator said the case underscored the growing pressure on British companies to strengthen cyber defenses following major breaches at Marks & Spencer, Co-op, and Jaguar Land Rover.

“With so many cyber attacks in the headlines, our message is clear: every organization, no matter how large, must take proactive steps to keep people’s data secure,” said John Edwards, the UK’s Information Commissioner.

Capita said it has since introduced advanced cybersecurity measures and completed an internal overhaul of its digital infrastructure. “Following an extended period of dialogue with the ICO, we are pleased to have concluded this matter,” said CEO Adolfo Hernandez.

The firm expects a free cash outflow of £59 million–£79 million in 2025, up from previous guidance of £45 million–£65 million, but noted that all other financial targets remain unchanged.

According to the National Cyber Security Centre (NCSC), the number of “highly significant” cyber incidents in Britain has doubled year-on-year, reflecting growing systemic risks across the public and private sectors.

Qantas Confirms Customer Data Released by Hackers Months After Cyber Breach

Australia’s national airline, Qantas Airways, has confirmed that customer data stolen during a July cyberattack has now been released online by cybercriminals. The airline said it was one of several companies targeted globally in the breach, which compromised the personal information of millions of passengers.

In the July incident, Qantas revealed that over one million customers had sensitive data — including phone numbers, dates of birth, and home addresses — accessed by hackers. An additional four million customers had their names and email addresses stolen, marking one of the largest data breaches in Australia’s recent history.

Qantas said the data was stolen through a third-party platform and has since been published by the hacker group known as Scattered Lapsus$ Hunters after the company missed a ransom deadline. “With the help of specialist cybersecurity experts, we are investigating what data was part of the release,” Qantas said in a statement.

The airline also confirmed that an injunction remains in place to prevent the use or further distribution of the stolen information. The July attack is among the most serious since cyber incidents targeting telecom firm Optus and health insurer Medibank in 2022, which led to tighter cybersecurity laws in Australia.