Bill Gates warned that advanced artificial intelligence models operated by criminals without safety safeguards will trigger a wave of cyberattacks over the coming year. Speaking in Washington, D.C., during an interview broadcast on Sunday (11), the Microsoft co-founder stated that malicious actors are already stripping guardrails from modern software to extort businesses, disrupt financial markets, and alter betting operations.
Gates stressed during the State of the Union program on CNN that the primary danger stemming from the technology is not an autonomous machine slipping out of human control, but rather human adversaries weaponizing cutting-edge systems. “When you have bad people, no safeguards, and then the latest models, that’s where, over the next year, primarily in the cyber area, we are going to have a lot of negative surprises,” Gates said.
Financial disruption and criminal business models in artificial intelligence
The co-chair of the Bill & Melinda Gates Foundation explained that cybercrime represents the most immediate threat vector because digital extortion relies on established underground business practices. In his assessment, malicious groups will combine the speed of emerging generative tools with standard extortion demands to demand illicit payouts or manipulate market conditions.
Read also: Google Gemini model infiltrates three corporate networks
“The front that we’ll probably see most dramatically in the next year is cyberattacks, because there, there’s a known business model where, you know, you threaten to do something and ask somebody to pay for that, or you create a disruption that changes something in the stock market or some betting thing that you go and do,” Gates said during the broadcast.
The warning comes amid growing evidence that digital attackers are finding ways to remove developer-imposed limitations from proprietary software, enabling illicit tasks such as finding zero-day software vulnerabilities, generating deceptive communications at scale, and automating intrusion techniques against corporate targets.
Keep reading: Google Gemini breaches networks of three firms in safety test
CrowdStrike report tracks rapid increase in automated intrusions
Data gathered by industry researchers confirms that malicious operations incorporating machine learning tools have expanded significantly over the past twelve months. In its 2026 Global Threat Report, released on February 24, 2026, cybersecurity firm CrowdStrike recorded that adversaries are increasingly moving away from traditional file-based malware in favor of identity theft and automated command execution, allowing intruders to compromise corporate environments in a matter of minutes or seconds.
The CrowdStrike findings revealed that threat actors have started injecting malicious prompts into legitimate generative artificial intelligence applications across more than 90 organizations to bypass administrative controls and harvest employee credentials without raising security alarms.
Key findings documented in the CrowdStrike 2026 Global Threat Report include:
- 89% increase in attacks conducted by adversaries enabled by artificial intelligence during 2025.
- 29 minutes as the average breakout time spent by intruders to move laterally across networks following an initial breach in 2025.
- 27 seconds as the fastest lateral movement time ever recorded by cybersecurity analysts.
- 82% of all detected cyber intrusions in 2025 conducted without traditional malware files.
Bioterrorism concerns and government safety oversight
During the interview, journalist Jake Tapper questioned Gates regarding risks that extend beyond financial extortion into biological security. Tapper cited specialized assessments indicating that the risk of a bioterrorist attack developed with artificial intelligence assistance could become up to 50 times greater than the occurrence of a naturally emerging pandemic, asking whether current government preparations are adequate to prevent catastrophic misuse.
“Well, no, we’re not doing enough,” Gates stated in response to the inquiry. “The real danger right now is not the AI is getting out of control. We need to work on that, but that’s years away in terms of the big impact that might have.”
Gates argued that corporate voluntary commitments alone cannot secure the broader technological ecosystem. He advocated for the formal creation of dedicated government safety bodies to supervise deployment practices, inspect technical models, and enforce uniform defenses across the industry.
The call for mandatory public oversight represents a contrasting approach to recent positions taken across the technology sector. At a United Nations gathering in September 2026, technology executives including OpenAI chief executive officer Sam Altman warned against excessive regulatory fatalism, arguing that premature statutory limits could hinder economic expansion while defensive artificial intelligence systems are still maturing.
Legislative debate and pending threat documentation
The intersection of national security and technological development has prompted responses across American political circles. Democratic strategist Billy Oliver, identified in separate reporting documents as Oliver Libby, argued that federal policy must balance commercial competition against emerging vulnerabilities.
“The great challenge both for innovators and governments in the coming months is to balance continued progress in AI with smart regulation. Leaders who can balance ensuring that America is not left behind, but that no American is left out, will win public trust,” the strategist said.
The strategist added that federal initiatives must prioritize mandatory security thresholds, penalties for illicit deepfakes, platform accountability, and economic measures to protect the domestic workforce from widespread automated displacement.
While public reporting highlighted an incident involving a suspected Chinese-speaking threat actor deploying automated artificial intelligence tools against South Korean financial institutions, investigators have not released technical details or official incident reports confirming the specific software mechanisms used in that intrusion.
Discussions regarding mandatory standards are scheduled to continue across international regulatory forums and congressional committees over the coming months as security agencies update defensive guidance against automated cyber threats.