Australia bans AI-made songs from its national music charts
Australia's record industry drew a hard line on generative music this week, while new research shows state-linked hackers quietly industrializing their operations with open-weight models. Two very different answers to the same question: what happens when machines can do the creative — and criminal — work end to end.
Songs created mostly or entirely by AI are now barred from the ARIA charts, Australia's main music rankings, under eligibility rules that took effect this week. Releases must be "substantially human made": AI tools can still assist, but people have to write the song and perform the lead vocal and primary instruments. The trigger was DJ Josh Fawaz's AI-heavy cover of Madonna's "Like a Prayer," which topped the dance chart, peaked at number 2 overall and racked up more than 48 million Spotify streams before he added generative-AI credits amid a backlash. ARIA says the code exists to "promote the human nature of artistry," adding that it is "not interested in promoting or celebrating the success of AI-generated music that does not contain human artistry."
It's among the first major national charts to write AI eligibility into its rules, and the template other chart bodies will now be pressed to copy. The awkward part: a chart is meant to measure what people actually play — and in July, the most-played song on Australian radio was an AI-assisted track. Turning a popularity metric into a values statement is a defensible choice, but "substantially human made" will eventually need auditors, not just adjectives.
China-linked hacking groups have more than doubled their attack volume since putting open-weight models such as DeepSeek to work, according to Taiwanese researchers at TeamT5. The models handle reconnaissance, exploit writing and malware development — attractive because they're cheap to run and lightly guarded. Palo Alto Networks' Unit 42 recovered one session in which DeepSeek autonomously winnowed 25,209 exposed servers down to vulnerable targets, though it breached none: across more than 460 attempted targets, every confirmed intrusion was finished by hand. One crew even ran Claude Code while posing as an engineer conducting authorized tests to slip past its safeguards.
The reassuring read is that AI hasn't produced autonomous cyberattacks yet — human operators remain the bottleneck. The uncomfortable one is that the expensive part of hacking just got dramatically cheaper, and the gap between machine-scale scouting and human-scale breaking is precisely what the next model generation will shrink.
What to watch: whether Billboard, the UK's Official Charts and others follow ARIA's lead — and whether any chart body publishes an actual audit process behind "substantially human made."
Who should draw the line on how much AI a song can contain — the chart bodies counting the plays, or nobody at all? Tell us in the comments.
