Risky Business said in June 2026 that open-weight models had closed on frontier ones for offensive cyber work
Five Eyes cyber agencies issued a call-to-action in June 2026 saying AI was accelerating the speed, scale and sophistication of cyber threats. In a June 25, 2026 newsletter, Risky Business's Tom Uren read it as the agencies' view that limiting AI's offensive capabilities to benign actors was no longer possible.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence50
More than 100 companies signed a call for collective action on cyber defence whose first principle is that status quo security will not be enough, a sentence co-signed by five of the vendors who supply that status quo.
Perspective Coverage
5 publishers
- Builder
- Builder 33%
- Operator
- Operator 42%
- Investor
- Investor 25%
Reality
- Evidence70
- Adoption20
- Hype gap+35
- Incentives80
- Confidence65
Dave Chismon argues that offence gets a pass/fail signal and defence does not, so every automated remediation still needs a person to weigh it and answer for it, even as his agency builds Cyber Shield.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives30
- Confidence60
China's intelligence chief names Claude Mythos and GPT-5.5-Cyber in a state cyber-risk article
Chen Yixin, who runs the Ministry of State Security, cited the two frontier models in the Cyberspace Administration's journal as evidence of a disruptive upgrade in offensive cyber capability, without alleging either was used against China.
Reality
- Evidence62
- Adoption38
- Hype gap+24
- Incentives72
- Confidence58
US-UK sign joint pact to coordinate prosecution of scam-center networks
American and British prosecutors have agreed to decide between themselves where scam-center cases get charged, and an industry disruption event in October will show who outside government is expected to act on that timetable.
Reality
- Evidence44
- Adoption34
- Hype gap+30
- Incentives62
- Confidence45
Andrew Bailey's August 28 letter names concentrated third-party providers as the fragile point and asks the sector to prove it can rebuild critical systems from bare metal. Supervisors will cite that wording long before any rule does.
Reality
- Evidence72
- Adoption30
- Hype gap+20
- Incentives65
- Confidence70
The AI Workforce Consortium says 28.5% of G7 cybersecurity postings required AI skills, up from 14.2% a year earlier. Senior postings grew 65% in six months; junior postings grew 5.9%.
Reality
- Evidence52
- Adoption58
- Hype gap+22
- Incentives74
- Confidence60
Five Eyes tell boards they have months, not years, and resilience becomes a governance question
A joint statement from five national cyber agencies reframes AI-compressed exploitation windows as a board accountability. Vendors are already quoting it in sales copy.
Reality
- Evidence22
- Adoption24
- Hype gap+48
- Incentives88
- Confidence30