Five eyes' alliance sounds alarm over urgent cyber threats from advanced AI models. The world's top signals agencies almost never sp...
The world's top signals agencies almost never speak as one. This week all five did, warning that AI able to topple governments and businesses is months out, not years, and urging leaders to act now. On June 22, 2026, the cybersecurity agencies of the Five Eyes intelligence alliance—the United States, United Kingdom, Canada, Australia, and New Zealand—issued a rare joint statement that sent shockwaves through the tech and security communities. The message was stark and unambiguous: "Frontier AI models are anticipated to exceed current industry expectations, fundamentally transforming both offensive and defensive cyber capabilities. Five eyes' alliance sounds alarm over urgent cyber threats from advanced AI models.
The timeline is not years, it is months". The three-page statement, signed by top officials including Rajiv Gupta, head of the Canadian Centre for Cyber Security, represented an extraordinary moment of consensus among allies who don't typically coordinate public warnings. The urgency stems from how AI is fundamentally altering the cybersecurity landscape. According to the Five Eyes agencies, advanced AI models are lowering barriers for malicious actors while simultaneously increasing the speed and complexity of attacks. What was once a time lag between discovering a software vulnerability and exploiting it has now been compressed to unprecedented levels—AI models can automatically scan, write exploit code, and spread attacks faster than humans can react.
Former CISA Director Chris Krebs described the situation in stark terms, warning of "the vulnerability tsunami that's heading our way". Cybersecurity expert John Bruggeman drew an analogy comparing frontier AI models to the U.S. Library of Congress in terms of size and power, versus a standard city library .
The Anthropic Incident
The warning came just days after the Trump administration ordered AI company Anthropic to suspend access to its most advanced models such as Mythos 5 and Fable 5 by foreign nationals over national security concerns . Anthropic's Mythos models had raised widespread cybersecurity concerns because the company said they possessed unprecedented abilities to find software vulnerabilities.
The intervention was particularly striking for a White House that had otherwise pushed to loosen AI oversight—even moving to block states from writing their own rules. According to reports, U.S. Senator Mark Warner (D-VA) revealed that Mythos had allegedly breached classified U.S. government systems in hours, rather than the estimated weeks.
The Five Eyes warning goes beyond traditional cybersecurity advice. The agencies emphasized that "cyber risks can no longer be viewed as purely technical issues," adding that "these are core business risks and leadership responsibilities".
Vulnerability
While sophisticated corporations may be better prepared, experts warn that small and medium-sized businesses could be sitting ducks. Olivia Shen, director of the Strategic Technologies Program at the University of Sydney's United States Studies Centre, noted a "massive gap" in defenses, with SMEs most exposed due to underinvestment in cybersecurity.
Interestingly, the Five Eyes agencies emphasized that AI is part of the solution, not just the threat . Organizations that integrate AI tools into their security operations can detect vulnerabilities earlier, improve software quality, monitor unusual behavior, and respond faster to incidents. This dual-use nature means the question is who deploys AI first and who deploys it better.
The statement, while light on new details, reinforced core cybersecurity advice :
- Swift patching: The U.S. cyber defense agency CISA has already reduced deadlines for government officials to deal with serious vulnerabilities to just three days
- System access: Limit who has access to critical systems
- AI integration: Use AI tools defensively to strengthen security operations
- Hardening targets: Make systems "harder targets, more agile, more resilient"
The warning is widely seen as an implicit reference to China, Russia, and other nations seeking to weaponize AI for cyber attacks. Experts note that powerful secret models may already be under development in other countries, creating a digital arms race where defensive measures must evolve at breakneck speed.
The Five Eyes alliance has sent an unmistakable signal: the era of AI-powered cyber threats is not coming—it's already here. With the timeline now measured in months, not years, the window for action is rapidly closing . The question is no longer whether breaches will occur, but which organizations will adapt before the time advantage completely shifts to the attackers.
