This is the first part of a two-part series on how frontier AI is reshaping cyber risk.

In recent months the cyber security industry has been grappling with a key question: how do highly capable frontier AI models change the threat environment?

In this episode we break this question down by looking at how AI has affected the cat and mouse game between attackers and defenders, and the operational reality facing most organisations. In turns out that, while the technologies behind this disruption are undoubtedly advanced, many of the lessons for businesses are pretty old school.

In part two we’ll explore the growing coverage of so-called “autonomous AI security incidents”.

 

Links

Anthropic – Project Glasswing overview https://www.anthropic.com/glasswing

UK AI Security Institute independent evaluation of frontier AI cyber capabilities https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities

Mozilla vulnerability findings using Mythos (Wired) https://www.wired.com/story/anthropic-claude-ai-model-mozilla-firefox-vulnerabilities/

Why AI has not yet meant more hacks (Risky Business podcast) https://risky.biz

APRA letter to regulated entities on frontier AI and cyber risk https://www.apra.gov.au/news-and-publications/apra-letter-industry-artificial-intelligence-ai

ASIC letter to licensees and directors about cyber risk https://download.asic.gov.au/media/xhrf1w0e/26-092mr-open-letter-to-afs-licensees-and-market-participants.pdf

Trump executive order https://www.cnbc.com/2026/06/02/trump-executive-order-ai.html

 

Credits

Editing and post-production by Martin Franklin (East Coast Studio) www.eastcoaststudio.com.au

Listen on Spotify