cyber.hendryadrian.com
Security News · ncsc.gov.uk

Five Eyes Cyber Agencies Urge Leaders to Act on AI-Driven Cyber Risk

· Original article ↗

Summary

Five Eyes cyber agencies warn AI is accelerating cyber threats and urge leaders to strengthen foundational security, resilience, patching, access controls, and incident readiness while using AI to improve defence.

Key points

  • The agencies say AI is increasing the speed, scale, and sophistication of cyber threats, while also offering opportunities to strengthen defence.
  • They urge boards and executives to treat cyber resilience as a core business responsibility and ensure controls work under pressure.
  • Recommended steps include reducing exposed systems, accelerating security updates, addressing unsupported systems, and strengthening identity and access controls.
  • Organisations should test incident plans and prepare teams for rapid containment and recovery, assuming breaches may occur.
  • The agencies advocate secure-by-design practices and defence in depth, noting that evolving AI systems may bring new vulnerabilities.
  • They recommend using AI in security operations to identify vulnerabilities, monitor unusual behaviour, and respond to incidents more quickly.

Article Details

Event Type
Five Eyes cybersecurity agencies issued a public call to action on the changing cyber risks associated with artificial intelligence.
Impact
The agencies warn that AI can lower barriers for malicious actors and increase the speed, scale, and complexity of cyber threats, shortening the time between vulnerability discovery and exploitation. They urge organizations to strengthen foundational security, patch promptly, prepare for incidents, and use AI to support cyber defence.

People

Catriona RobinsonIdentified as Head of the National Cyber Security Centre, Government Communications Security Bureau, and a signatory to the call to action.David ImbordinoIdentified as Director of the Cyber Security Directorate, National Security Agency, and a signatory to the call to action.Nick AndersenIdentified as Acting Director of the Cybersecurity and Infrastructure Security Agency and a signatory to the call to action.Rajiv GuptaIdentified as Head of the Canadian Centre for Cyber Security, Communications Security Establishment, and a signatory to the call to action.Richard HorneIdentified as Chief Executive Officer of the National Cyber Security Centre and a signatory to the call to action.Stephanie CroweIdentified as Head of the Australian Cyber Security Centre, Australian Signals Directorate, and a signatory to the call to action.