Booz Allen OT lab test: frontier AI models hit every objective across eight industrial scenarios, went from perimeter compromise to actions inside an ICS network in just over 16 minutes, and found and moved a robotic arm
Booz Allen published research on 8 October 2026 (covered by SecurityWeek on 14 Oct after a presentation at SecurityWeek's ICS Cybersecurity Conference) on how frontier AI models, which it calls 'super intelligence', performed in its isolated OT Cybersecurity Lab. The models had no source code, engineering documents or advanced OT guidance, and human operators approved every exploit and any action that could have a physical effect. Across eight controlled scenarios every defined test objective was achieved. In one test the models moved from a perimeter compromise to actions inside the industrial control network in just over 16 minutes; in another a model found a robotic arm, mapped its protection zones and motion limits, and moved it within minutes. Existing defences blocked or slowed some actions, but no single safeguard consistently stopped the models. Booz Allen says the results undercut the security-through-obscurity many OT sites rely on, and advises owners and operators to make environments hard to traverse, remove implicit trust, detect consequential industrial changes quickly, and limit what an attacker can affect after getting in.
- Product
- Frontier AI models used as autonomous agents against OT / industrial control systems (lab research)
- Versions
- n/a — research
- Exploited in Australia?
- unknown
- Patch to
- Nothing to patch. Segment IT from OT with enforced conduits, remove implicit trust between zones, alert on engineering-workstation and controller changes in near real time, and limit what a single foothold can command physically (safety PLC independence, motion and setpoint limits).
Primary: Booz Allen — Super Intelligence Reached OT Systems and Moved Equipment (8 Oct 2026) · SecurityWeek — AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds (14 Oct 2026)