Bill Gates warns of AI cyberattacks that CrowdStrike already counted

Bill Gates told ABC News on 11 October that the next year will bring a lot of negative surprises in cyber, driven by bad people running the latest models with no safeguards. He put the escape-of-control risk years out and the cyber risk at twelve months.

“When you have bad people, no safeguards, and then the latest models, that is where, over the next year, primarily in the cyber area, we are going to have a lot of negative surprises”

— Bill Gates, ABC News, 11 October 2026

The year he forecasts has been counted

CrowdStrike measured that year already. Its 2026 Global Threat Report counted an 89% year-on-year rise in attacks by AI-enabled adversaries during 2025. Average eCrime breakout time, the gap between a first foothold and the move to a second machine, fell to 29 minutes, against 48 in 2024 and 98 in 2021. Four years took 70% off the defender's window, and the fastest breakout in the set took 27 seconds.

The same report puts 82% of intrusions in the malware-free column. Attackers sign in with stolen credentials and drive the admin tools already sitting on the machine. If you hold crypto, that line matters more than the model behind the attack: a stolen session and a phone call to a support desk empty a wallet without one line of AI-written code.

Gates named financial systems and extortion as targets. CrowdStrike logged one intrusion where data started leaving four minutes after the first access, which is shorter than the time it takes to read the breach alert.

What the forecast leaves out

The Bill Gates AI cyberattacks forecast carries no number and no test. A lot of negative surprises fits any twelve months of cyber since 2021, and the measured trend was running at 89% before he spoke.

Our own check on the Korean bank breaches found the whole AI attribution resting on one HTML string, and in September Jensen Huang called the cybersecurity panic demand creation. Two people with the same information read it in opposite directions, and only one of them sells the chips the attacks run on.

What to watch

Watch the breakout time in the next CrowdStrike report rather than the forecast. A drop below 29 minutes gives the surprise a number. A flat reading leaves the picture as it stands, with the same crime running faster on better tools, and your seed phrase still the part nobody else can restore.

Informational material, not investment advice. The CrowdStrike figures cover 2025 and the report was published in February 2026, so they describe the year before the forecast, not the year it covers.