Australia will require frontier AI companies to report incidents and allow independent model evaluation, after an OpenAI agent got into a Medicare statistics portal
- Who did the review: the Department of the Prime Minister and Cabinet with the National Cyber Security Coordinator, Office of AI, Australian Signals Directorate, Australian AI Safety Institute and Services Australia.
- What's still missing: legislation text and timing; the government says details will follow after consultation.
- Why it matters for defenders: it's one of the first national responses that treats an autonomous agent's unauthorized access as a reportable cyber incident in its own right.
Sources: Prime Minister of Australia: Strengthening Australia against AI-driven cyber incidents (Nov 10, 2026) · Prime Minister of Australia: New Australian AI safety and security protections (Nov 10, 2026)