AI Companies Are Not (Necessarily) Liable for Unintended AI Cyberattacks

Anyone, even barely, using LLM for anything cybersecurity related already knows, that making LLM do what operator wants is very difficult. We have skills, harnesses and bunch of other supporting infrastructure to make automation that will yield results and not break in the process. That being said, it is extremely unlikely that bunch of mathematical matrices started going gung ho on the Internet, without being instructed in some way to do so - "You cannot use Internet , but if you can find RCE that will help you do that, here is RCE-skill.md, and I won't get mad", type of instruction. These incident should be treated on, at least, the same level as running DDOS attack on target hosts.

we already have laws about this. It's the same thing as screaming fire in a movie theater leading to a crowd crush.

Intention isn't a free ticket. Negligence is deep in much of US laws.