Cyber Insurers Focus on Speed as AI Rewrites Security
2026-07-01
The Wall Street Journal
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Advanced AI models like Anthropic's Mythos can autonomously discover and exploit software vulnerabilities, raising the risk of large-scale cyberattacks on critical infrastructure. Governments and insurers are responding with new regulations and risk assessments, but no major AI-driven cyber incident has yet occurred. The threat is global, with US and Chinese AI models at the forefront.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves AI systems (frontier AI models) that can identify and exploit software vulnerabilities, which is a credible AI-related cyber risk. However, the article does not report any actual AI-driven cyberattack or harm that has occurred; it mainly discusses the plausible future risk and the need for insurers to adapt their risk assessment and underwriting practices accordingly. This fits the definition of an AI Hazard, as the AI's involvement could plausibly lead to an AI Incident (widespread cyberattacks exploiting vulnerabilities rapidly), but no such incident is described as having happened yet.[AI generated]