Risky Business said in June 2026 that open-weight models had closed on frontier ones for offensive cyber work
Five Eyes cyber agencies issued a call-to-action in June 2026 saying AI was accelerating the speed, scale and sophistication of cyber threats. In a June 25, 2026 newsletter, Risky Business's Tom Uren read it as the agencies' view that limiting AI's offensive capabilities to benign actors was no longer possible.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence50
A presidential memo directs DHS to authorise vetted private firms to conduct cyber surveillance and cyber effects operations against foreign criminal groups. The boundaries matter more than the announcement.
Perspective Coverage
4 publishers
- Builder
- Builder 19%
- Operator
- Operator 57%
- Investor
- Investor 24%
Reality
- Evidence68
- Adoption5
- Hype gap+20
- Incentives55
- Confidence62
Bessent tells the House that AI labs should be liable for what their models generate
Treasury Secretary Scott Bessent told the House Financial Services Committee that frontier labs asking for a liability exemption should instead answer for what they build. The incidents behind that ask started with ordinary control failures.
Reality
- Evidence55
- Adoption35
- Hype gap+10
- Incentives70
- Confidence50
Nexus sold access to 153 million genuine US and Canadian driver's licences
Krebs On Security watched the database grow by nearly 400,000 records in one day, matching Nexus's own claim of more than a year of continuous exfiltration from an identity verification company.
Reality
- Evidence62
- Adoption68
- Hype gap+22
- Incentives40
- Confidence58
US agencies assess Volt Typhoon's infrastructure access as pre-positioning for disruption
The advisory puts Volt Typhoon inside communications, energy, transport and water IT environments across the US and Guam, and says the behaviour does not look like espionage. The planning problem is outage, not data loss.
Reality
- Evidence70
- Adoption58
- Hype gap+12
- Incentives55
- Confidence62
Insider bank theft prompts North Korea to tighten controls on its hacking teams
Daily NK reports Pyongyang's elite are stunned by the scheme and that Reconnaissance General Bureau officials fear the blame reaching them. Tom Uren expects tighter controls on hacking teams, not fewer operations.
Reality
- Evidence34
- Adoption31
- Hype gap+17
- Incentives48
- Confidence43
Meta's 95% certainty bar turns suspected scam advertisers into premium customers
Documents reviewed by Reuters put Meta's projected 2024 scam and banned-goods ad revenue near $16 billion, while a February 2025 internal plan set aside $135 million in forgone revenue to curb suspicious advertisers.
Reality
- Evidence44
- Adoption
- Not scored
- Hype gap+14
- Incentives76
- Confidence41
A presidential memo licenses private companies to hack cybercrime groups for DHS
The memo tells DHS to vet and license firms for cyber surveillance and disruption against foreign crime groups. Contractors will be making state-grade attribution calls backed by a $1 million bond and little else.
Reality
- Evidence46
- Adoption10
- Hype gap+18
- Incentives58
- Confidence50
Europe's offensive cyber pitch skips the cheaper punishments already on the shelf
At Munich, EU and NATO officials asked for the power to strike back at Russia and China. The newsletter Seriously Risky Business points out that the sanctions and expulsions Europe already holds have gone unused, so defenders should plan on the current tempo holding.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+32
- Incentives52
- Confidence57
Bitdefender ties seven remote access tool families to a single Central Asia espionage actor and finds traces of AI-assisted development. Its own numbers show where clustering still held.
Publishers:bitdefender.com · businessinsights.bitdefender.com · news.risky.biz Perspective Coverage
3 publishers
- Builder
- Builder 27%
- Operator
- Operator 55%
- Investor
- Investor 18%
Reality
- Evidence61
- Adoption42
- Hype gap+17
- Incentives71
- Confidence60
Anthropic says AI ran the intrusion, not the briefing: thirty targets, one operator
A Chinese state-linked group let Claude Code do 80 to 90 percent of the hands-on work against roughly thirty organisations. The tradecraft was loud, and that was the point.
Reality
- Evidence48
- Adoption32
- Hype gap+22
- Incentives62
- Confidence46
Washington names industrial-scale distillation, then hands the detection bill to abuse teams
A White House memo calls Chinese model distillation deliberate and industrial in scale, then answers it with information sharing, best practices and a demarche. The detection work stays with providers.
Reality
- Evidence55
- Adoption38
- Hype gap+32
- Incentives66
- Confidence58
China got the handcuffs on Chen Zhi. Expect the fraud to change address, not stop
Beijing's crackdown on Southeast Asian scam compounds is driven by domestic outrage, and one expert told Congress the effect so far has been syndicates pivoting to target Americans.
Reality
- Evidence56
- Adoption58
- Hype gap+6
- Incentives34
- Confidence55
The ransom is for silence now, and your restore drill does not price that
Tom Uren and James Wilson say the cybercrime ecosystem is moving to data-theft extortion. For reputation-sensitive organisations, that puts the dominant loss outside recovery planning.
Reality
- Evidence18
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence25