This is the first part of a two-part series on how frontier AI is reshaping cyber risk.
In recent months the cyber security industry has been grappling with a key question: how do highly capable frontier AI models change the threat environment?
In this episode we break this question down by looking at how AI has affected the cat and mouse game between attackers and defenders, and the operational reality facing most organisations. In turns out that, while the technologies behind this disruption are undoubtedly advanced, many of the lessons for businesses are pretty old school.
In part two we’ll explore the growing coverage of so-called “autonomous AI security incidents”.
Links
Anthropic – Project Glasswing overview https://www.anthropic.com/glasswing
UK AI Security Institute independent evaluation of frontier AI cyber capabilities https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities
Mozilla vulnerability findings using Mythos (Wired) https://www.wired.com/story/anthropic-claude-ai-model-mozilla-firefox-vulnerabilities/
Why AI has not yet meant more hacks (Risky Business podcast) https://risky.biz
APRA letter to regulated entities on frontier AI and cyber risk https://www.apra.gov.au/news-and-publications/apra-letter-industry-artificial-intelligence-ai
ASIC letter to licensees and directors about cyber risk https://download.asic.gov.au/media/xhrf1w0e/26-092mr-open-letter-to-afs-licensees-and-market-participants.pdf
Trump executive order https://www.cnbc.com/2026/06/02/trump-executive-order-ai.html
Credits
Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au