AskVantage

Security and privacy

Five Eyes warn AI models that can ruin companies and governments now months away

Leaders now have months, not years, to treat AI-driven cyber attacks as a core business risk.

Key takeaways

  • Signals agencies for Australia, the US, the UK, New Zealand and Canada warned in a rare joint statement that devastating AI cyber capabilities are months away.
  • The Five Eyes agencies said AI will help cyber defence over time but speeds up the scale and sophistication of cyber threats.
  • The statement calls cyber risk a core business risk and leadership responsibility, needing a whole-of-organisation and whole-of-society response.
  • The US government suspended foreign nationals' use of Anthropic's Mythos and Fable 5 models in June, citing national security advice.
Cite or link to this article

Griffin, M. (2026) 'Five Eyes warn AI models that can ruin companies and governments now months away', 311 Institute, 22 June. Available at: https://www.311institute.com/five-eyes-warning-ai-cyber-attacks-months-away/ (Accessed: 25 October 2026).

Powerful Artificial Intelligence (AI) models, like the recently unveiled Anthropic Mythos AI, that are capable of devastating new cyber attacks on governments and businesses are mere months away, intelligence agencies for the Five Eyes have warned in a rare joint statement, urging leaders to “act now.”

The surprising public intervention by signals agencies for Australia, the US, the UK, New Zealand and Canada comes after the Trump administration earlier this month decided to block “foreign nationals” from using a much-hyped AI model built by tech company Anthropic, called Fable.

The statement, issued late on Monday night, Sydney time, said while AI “would help us improve cyber defence over time, it also accelerates the speed, scale, and sophistication of cyber threats”.

“Frontier AI models are anticipated to exceed current industry expectations, fundamentally transforming both offensive and defensive cyber capabilities. The timeline is not years, it is months,” the warning by Five Eyes agencies said.

“In this environment, cyber resilience is integral to advancing business continuity, market confidence, and long-term value.”

AI and The Future of Cyber Defence 2030, a keynote by futurist Matthew Griffin

The cybersecurity agencies said the leaps in AI models showed the technology would lower barriers for bad actors and increase the speed and complexity of attacks.

“A whole-of-organisation and whole-of-society response is required,” the statement continued. The Five Eyes is an intelligence alliance set up between the five countries after the second world war.

“Cyber risk can no longer be treated as a purely technical issue. This is a core business risk and leadership responsibility.”

Generative AI models are powerful new tools capable of looking for vulnerabilities in cyber security systems, and they can help exploit those vulnerabilities as well as repair them.

“What’s different about the latest [AI models] ones is they’re very good at generating exploits,” Olivia Shen, an expert in national security and AI at the University of Sydney United States Studies Centre, said.

While no AI models or companies are mentioned in the Five Eyes statement by name, many around the world have their eyes on Anthropic’s advanced tier of tools.

One of the major tech company’s latest inventions is called Fable 5, a supposedly more community-friendly version of Mythos – a powerful AI model released earlier this year capable of detecting vulnerabilities in cyber systems that is only available to vetted organisations and companies because of concerns it could be exploited.

Both of Anthropic’s models were suspended for use by “foreign nationals” in June by the US government, which cited advice by national security authorities. Shen said much of the world was focused on what happens next for Anthropic but there could be many more powerful AI models not far off.

“I think we have to anticipate that the next Mythos or the next Fable is just around the corner [from adversaries like China],” Shen said.

“We can only see what’s been released but there could be other models being developed by the likes of China, or other states and other actors and companies, that are just as advanced.”

In March, the Albanese government signed Anthropic as the first company on to its national AI plan. The non-binding memorandum of understanding means companies agree to share details of AI progress with the government and “promote safety.”

The government’s national plan promotes a light-touch approach on regulating the sector in a bid to capture economic and productivity benefits from the technology.

First published on Fanatical Futurist on 22 June 2026.

311 Intelligence

What this means

Analysis by the 311 Strategic Intelligence Unit

The big shift is that AI cyber risk has moved from the IT team to the boardroom. The signals agencies of Australia, the US, the UK, New Zealand and Canada say frontier AI will transform attack and defence within months, and that cyber risk is now a core business risk and leadership responsibility. Our Starburst data points the same way: we track AI Cyberattacks, attackers using AI and autonomous agents to find flaws, write malware and run campaigns at machine speed, as a Prepare trend, and we expect Robo-Hackers, programs that hunt for weaknesses and break in with little human help, to reach wide use by 2032.

What it means by sector.

  • Every business: the agencies say AI lowers the barrier for bad actors and raises the speed and complexity of attacks. Cyber resilience becomes part of business continuity, market confidence and long-term value, not only a technical cost.
  • Governments: the US has already suspended foreign nationals' use of Anthropic's Mythos and Fable 5 on national security advice. We track Technological Sovereignty, efforts to cut reliance on foreign chips, cloud and software, as an Act now trend, and access to frontier AI is becoming part of it.
  • Cyber security providers: the same models that find vulnerabilities can help fix them. As Olivia Shen notes, comparable models may come from China or other states, so defenders cannot assume they alone hold the best tools.

What to do now.

  • Put AI-driven cyber attacks on the board risk register this quarter and name an executive owner.
  • Shorten the time between a vulnerability being published and your patch, because attackers are speeding up.
  • Test your business continuity plans against a fast, large-scale attack, not just a single breach.

The Starburst technologies behind this story

From the 311 Technology Starburst (first product, expected wide use and readiness):

Technology Category First product Wide use Action TRL
Robo-Hackers Security 2018 2032 Explore 7
Autonomous Cyber Reasoning Systems Security 2025 2032 Explore 7
Adversarial Cyber Defence Security 2016 2029 Prepare 7
Large Language Models Intelligence 2020 2024 Act now 9

And the trends they feed, from the 311 Trends Starburst:

Trend Wide use Action
AI Cyberattacks 2028 Prepare
Technological Sovereignty 2027 Act now

How this moves the trend

We have tracked AI's growing hacking skill for years. In 2024 we reported that autonomous GPT-4 AI agents could use Zero Days to successfully hack systems, and in 2025 that AI helps criminals exploit CVE vulnerabilities 5 minutes after publication. In April 2026 Anthropic's Mythos found security problems in every major operating system and browser, and in late May we reported Anthropic had pulled Mythos and Fable 5 for foreign users. The Five Eyes warning turns that trajectory into an official deadline.

Go deeper with 311

FAQ

What did the Five Eyes agencies warn about AI?

The signals agencies of Australia, the US, the UK, New Zealand and Canada warned that frontier AI models will transform offensive and defensive cyber capabilities within months, not years, lowering barriers for bad actors and increasing the speed and complexity of attacks.

Why are Anthropic's Mythos and Fable 5 models relevant?

Mythos can detect vulnerabilities in cyber systems and is only available to vetted organisations because of concerns it could be exploited. Fable 5 is a more community-friendly version, and both were suspended for foreign nationals by the US government.

What should business leaders do about AI cyber threats?

The Five Eyes statement says cyber risk can no longer be treated as a purely technical issue. It is a core business risk and leadership responsibility, and cyber resilience is integral to business continuity, market confidence and long-term value.

Could other countries build models like Mythos?

Olivia Shen of the University of Sydney United States Studies Centre says the next Mythos or Fable could be just around the corner, with models from China or other states and actors that are just as advanced.

Matthew Griffin

About the author

Matthew Griffin Founder, 311 Institute

Matthew Griffin is a multi-award winning Futurist and expert in Disruption and Innovation, Geopolitics, Leadership, and Technology, who NASA have described as a "walking encyclopaedia of the future" and a "futurist Polymath."

Read full bio

Matthew Griffin is a multi-award winning Futurist and expert in Disruption and Innovation, Geopolitics, Leadership, and Technology, who NASA have described as a "walking encyclopaedia of the future" and a "futurist Polymath." 15-time best selling author of the "Codex of the Future" series, Matthew is the Founder and Futurist in Chief of the 311 Institute, a global Futures and Deep Futures advisory firm working with royal households, world leaders, G7, G20, and G77 governments, NGOs, and multi-national mid and mega cap firms to help them explore, shape, and lead the next 50 years of business and society.

An award-winning YouTube creator with over a million followers, with an unrivalled global reach and impact, Matthew is a highly sought-after international keynote speaker, lecturer, and mentor who collaborates with global leaders through the United Nations Alliance of Civilizations (UNAOC) and United Nations General Assembly (UNGA) to shape pivotal initiatives such as the UN’s AI for Humanity program, the United Nations Conference of the Parties (UN COP), and the World Economic Forum in Davos.

As the former Global Head of Cloud, National Security, and Enterprise Sales for companies including Atos, Dell-EMC, and IBM, Matthew has a proven track record of building multi-billion dollar business units and turning failing divisions into market leaders. His ability to identify, analyse, and communicate the implications of hundreds of emerging technologies and trends is unparalleled, and his insights are trusted by many of the world’s most respected organisations, including ABB, Accenture, Adidas, AON, ARM, BCG, Centrica, Citi, Coca-Cola, Dentons, Deloitte, Dow Jones, EY, Google, KPMG, Lego, Legal & General, LinkedIn, Microsoft, PepsiCo, Qualcomm, RWE, Samsung, Siemens AG and Siemens Energy, T-Mobile, UBS, VISA, Walmart, Workday, Worldpay and many others.

Regularly featured in the global media including the AP, BBC, Bloomberg, CNBC, Discovery, Forbes, Khaleej Times, Telegraph, TIME, ViacomCBS, WIRED, and the WSJ, Matthews mission is to help organisations create a fair and sustainable future whose benefits are shared by everyone irrespective of their ability, background, or circumstances.

What future do you need to see?

Choose one to get started on security and privacy and the future of your organisation.

Where should Matthew reply?

Takes 30 seconds. No obligation. Matthew replies quickly. Privacy

Tag Cloud

Dossier opens the 311 Starburst dossier for that technology or trend.

Sources and further reading

  1. suspended for use anthropic.com
Book Matthew