Five Eyes Agencies Warn AI-Powered Cyberattacks Are Months Away as Western Defences Fall Behind

The intelligence agencies of the United States, United Kingdom, Australia, Canada, and New Zealand issued a rare joint public warning in late June, declaring that the most advanced artificial intelligence models are improving at a pace that could allow them to outsmart prevailing cybersecurity defences within months, not years. As CBS News reported, the Five Eyes spy agency alliance urged governments and businesses to act swiftly to prepare as AI continues to evolve. The joint statement, published by the heads of the five nations' cyber security agencies, described the threat landscape as fundamentally shifting, warning that frontier AI models are anticipated to exceed current industry expectations in both offensive and defensive capabilities.

The warning carries acute operational weight because of what has already occurred in controlled settings. According to Democracy Now, the Trump administration ordered Anthropic to limit foreign national access to its Fable 5 and Mythos 5 models after they demonstrated a pronounced ability to exploit critical software vulnerabilities — a restriction that remained in force for most of June before being lifted on June 30. The Five Eyes statement, while not naming specific models, noted that AI lowers barriers for malicious actors and increases the speed and complexity of attacks, according to CBS News. Olivia Shen, director of the Strategic Technologies Program at the United States Studies Centre at the University of Sydney, told CNN that small and medium-sized businesses, which have historically underinvested in cybersecurity, face the greatest exposure.

The five agencies were unambiguous about the timeline and the prescription. According to Euronews, the joint statement said the timeline for AI-capable cyberattacks is not years, it is months. The agencies called on corporate boards and senior executives to treat cyber resilience as a board-level strategic priority, upgrade legacy systems, patch faulty software, and tightly restrict access to critical infrastructure. Crucially, they also identified AI as part of the solution: organisations that integrate AI tools into their security operations can detect vulnerabilities earlier, improve software quality, monitor unusual behaviour, and respond faster to incidents, according to CNN.

Richard Horne, chief executive of the UK's National Cyber Security Centre, said in the joint statement that recent developments are shifting the global threat landscape and that defenders must keep up. The warning has direct commercial implications for the cybersecurity industry. The global cybersecurity market is projected to reach $248 billion in 2026, according to industry analysis from elev-x, with 78% of business and technology executives planning to increase cyber spending this year. Venture capital flows have reflected the urgency: the top ten cybersecurity startups alone have raised roughly $13.9 billion in cumulative funding, according to New Market Pitch, with capital concentrating heavily around AI-powered threat detection, cloud security, and security operations automation.

For the enterprise technology market, the Five Eyes advisory effectively marks an inflection point. Cybersecurity spending decisions that were previously measured in annual budget cycles must now respond to a threat landscape that the agencies themselves say can become obsolete within months. The startups best positioned to benefit are those building AI-native security platforms capable of autonomous threat detection and response — a category that, according to Help Net Security's analysis of 2025 seed activity, ranked highest in both new company formation and planned enterprise spending entering 2026. As frontier AI models grow more capable by the quarter, the question confronting every CISO is no longer whether to invest in AI-driven defence, but whether any legacy security posture can survive what is coming.