The leaders of the Five Eyes alliance of cybersecurity agencies have warned that AI is fundamentally changing the cyber threat landscape, which has implications for customer experience leaders and the way they approach cybersecurity.
In a joint call to action, the agencies representing Australia, Canada, New Zealand, the UK and the US said that frontier AI models are rapidly increasing offensive and defensive cyber capabilities, leaving organizations with limited time to adapt.
"The timeline is not years, it is months," the statement said, warning that AI is shrinking the gap between vulnerability discovery and exploitation while lowering barriers for malicious actors.
"The rapid pace of frontier AI development means cyber risk assumptions can become outdated in months, not years. We must act before and be prepared to adapt and withstand evolving threats."
As AI becomes embedded across customer interactions, operational resilience is becoming inseparable from customer trust, service continuity and brand reputation.
AI Is Increasing the Pace of Cyber Risk: Faster Attacks Demand Faster Response
The Five Eyes agencies warned:
“Cyber risk can no longer be treated as a purely technical issue. This is a core business risk and leadership responsibility."
That message aligns with concerns emerging across the enterprise AI ecosystem following the recent release and subsequent withdrawal of Anthropic's Claude Fable 5 and Mythos 5 frontier models in response to U.S. government export control requirements.
The guidance warned that AI is dramatically reducing the time available to respond to emerging vulnerabilities, making long-established security practices more urgent than ever.
That aligns with comments by Vincent Danen, Vice President of Product Security at Red Hat, in a recent CX Today interview, warning that enterprises need to prepare for an unprecedented increase in discovered vulnerabilities.
Rather than treating every newly discovered vulnerability as equally urgent, Danen recommends that enterprises adopt a structured risk-based approach.
The Five Eyes agencies similarly encourage organizations to focus on cybersecurity fundamentals, including reducing attack surfaces, accelerating patching, replacing unsupported legacy systems, strengthening identity management and regularly testing incident response plans.
Danen believes that the biggest challenge for enterprises will be adapting security operations quickly enough. "AI is like dog years, it compresses everything," Danen said. "Everything is moving so fast."
"The more important part to look at is exploitation is going to happen faster. People who typically are used to a patch window... have to learn to be nimble."
Patching alone will not be enough, particularly as attackers increasingly use AI to automate exploitation, Danen added. "The time to really shore up our defenses is now.”
