The cyber agencies of the U.S., U.K., Canada, Australia, and New Zealand issued a joint statement reframing AI cyber risk as a board-level strategic risk, not merely a technical-security issue. The statement says AI will improve defense but also accelerate the speed, scale, and sophistication of threats; it warns that frontier models may shift cyber capabilities on a timeline of “months,” not years.
The cyber agencies of the U.S., U.K., Canada, Australia, and New Zealand issued a joint statement reframing AI cyber risk as a board-level strategic risk, not merely a technical-security issue.
This supports the conclusion that AI changes the tempo of exploitation and patching in a way that is not comparable to slower PC-era automation.
Read the evidence behind this analysis. External links open in a new tab.
NSA
The European Commission has issued operational guidance for Article 50 of the AI Act before its transparency obligations begin applying on August 2, 2026. Providers must disclose when people are interacting with systems such as chatbots, agents, or avatars and make generative outputs detectable through machine-readable marking; deployers must disclose emotion-recognition or biometric-categorization uses and clearly label deepfakes and certain AI-generated public-interest text when it lacks human review or editorial control.
The latest nationally representative ONS survey documents a substantial deterioration in public confidence: 38% of adults now believe AI presents more risks than benefits, up from 25% in August 2024, while only 13% perceive more benefits than risks. The dominant concerns are difficulty distinguishing fake information, reported by 81%; use of personal data without consent, 77%; and increased cybercrime exposure, 63%.
JPMorgan CEO Jamie Dimon warned that unrestricted access to Anthropic’s Mythos-class models presents a serious security problem because of their ability to identify consequential software vulnerabilities, arguing that distribution of such capabilities must be controlled. JPMorgan was among the selected organizations given access to Mythos for defensive cybersecurity work; U.S.