Five Eyes Warn AI Cyber Risks are Rising Within Months, Urge Board-Level Action

The Five Eyes intelligence alliance, comprising cybersecurity agencies from Australia, Canada, New Zealand, the United Kingdom, and the United States, has issued a stark joint warning regarding the escalating cyber risks posed by artificial intelligence. The agencies assert that the rapid evolution of AI is fundamentally reshaping the cyber threat landscape, with the emergence of disruptive AI-enabled cyber capabilities now a matter of months, rather than years. This accelerated timeline necessitates immediate and decisive action from organizations worldwide. A central message from the Five Eyes is that cybersecurity can no longer be viewed as merely a technical issue, but must be recognized as a core business risk and a leadership responsibility. Boards and senior executives are urged to take direct accountability for cyber resilience, ensuring that protective measures are not just documented on paper but are proven to be effective under real-world pressure. The alliance highlighted that malicious actors are leveraging AI to significantly shorten the window between the discovery of a vulnerability and its exploitation, intensifying the pressure on organizations to implement faster patching processes. To combat these evolving threats, the Five Eyes agencies recommend several critical actions. Organizations should focus on reducing their attack surface by limiting unnecessary system access and external connectivity, and by isolating systems that do not require external exposure. Accelerating patching processes is paramount, as AI-driven exploitation timelines are rapidly shrinking. Strengthening identity and access controls is also crucial to limit unauthorized access to critical systems. Furthermore, the warning explicitly identifies unsupported legacy systems as significant strategic liabilities, making them easier targets for AI-enhanced attacks. The agencies also stressed the importance of preparing for inevitable breaches by developing robust incident response plans that prioritize rapid containment and recovery. They advocate for secure-by-design and secure-by-default practices to become standard, rather than aspirational. While acknowledging AI's potential to enhance defensive capabilities, such as earlier vulnerability detection and faster incident response, the Five Eyes emphasize that a layered security approach and defense-in-depth strategies remain essential, as no single technology will suffice. The overarching message is that integrating cybersecurity into core business strategy and acting swiftly are vital for maintaining operational continuity, market confidence, and long-term resilience in this new AI-driven threat environment.