{"id":219557,"date":"2026-05-24T05:20:00","date_gmt":"2026-05-24T09:20:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/24\/nz-at-wild-frontier-of-ai-superhacking\/"},"modified":"2026-05-25T04:35:23","modified_gmt":"2026-05-25T08:35:23","slug":"nz-at-wild-frontier-of-ai-superhacking","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/24\/nz-at-wild-frontier-of-ai-superhacking\/","title":{"rendered":"NZ at wild frontier of AI superhacking"},"content":{"rendered":"

NZ at wild frontier of AI superhacking<\/a><\/p>\n

https:\/\/www.rnz.co.nz\/news\/science-and-technology\/596203\/nz-at-wild-frontier-of-ai-superhacking<\/a><\/p>\n

Publish Date: 2026-05-24 05:20:00<\/a><\/p>\n

Source Domain: www.rnz.co.nz<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

The rise of artificial intelligence is a growing threat to cyber security
\nPhoto: 123RF<\/p>\n

New Zealand’s cyber watchdog says it is learning from the US companies who are testing superhacking AI models that have sent US banks rushing to plug holes, and sparked briefings with the Department of Homeland Security.
\nHeavyweight cyber security firm Palo Alto Networks said its tests on the AI model Claude Mythos found it could detect and exploit years-old software flaws so fast and effectively that the company last week issued a couple of dozen security alerts in a single day, when it usually issues only five or so a month.
\nThe National Cyber Security Centre (NCSC) in New Zealand has warned to get ready for “a significant increase in vulnerabilities and incidents”.
\n“The NCSC recognises the risks and opportunities presented by these new tools and is responding with a number of related workstreams,” it told RNZ.
\nIt recently briefed 300 local cybersecurity specialists about so-called ‘frontier’ AI models.
\nIn April, Mythos’s creator Anthropic set up what it called Project Glasswing to release the model to a small group of companies and agencies, including the Pentagon, to test if it could threaten systems behind critical infrastructure by exploiting the likes of ‘zero-day’ vulnerabilities – so-called because they have existed undetected in code from when software was released, leaving developers ‘zero days’ to prepare a fix.
\nSome of this small group are outside the US, but New Zealand’s NCSC is not in it.
\n“The NCSC is not part of Glasswing but we are talking regularly with a range of partners and vendors, including some who are involved with Glasswing, so that we can understand the landscape and provide meaningful advice and guidance on the implications of frontier AI,” it told RNZ.
\nThe NCSC said it was engaging with tech companies including developers of frontier models and companies that have had access to preview models like Mythos.
\nOther frontier models being tested in the US include Claude Opus 4.7 and OpenAI’s GPT-5.5-Cyber.
\nAnthropic said Mythos’s hacking abilities just emerged – they were not designed-in – and warned the fallout across economies, public safety and national security could be “severe” if the tool were to fall into the wrong hands.
\nCritics have said this might just all be marketing hype. Other reports suggested the small group’s testing was showing Mythos was expert at chaining together lower-risk vulnerabilities – “daisy-chaining” it is called – into a high-risk vulnerability.
\nAnalysts have said Mythos is of a type of new AI that feels different because it is capable of setting loose its own long-running agents that don’t need constant human steering.
\nOn 12 May, Reuters reported that US banks were “rushing to plug cyber holes” flagged by Mythos.
\nThe New York Times said China, foreseeing a threat, had asked for access to Mythos but been denied.
\nTwo days later, cybersecurity news website Nextgov said Anthropic executives had given a live demo to a closed-door briefing of a US Homeland Security Committee.
\nAnd on 20 May, https:\/\/www.politico.com\/news\/2026\/05\/20\/nsa-cyber-command-ai-task-force-mythos-00930786 Politico reported] that the Pentagon was racing to weaponise frontier models – ironic as it had been freezing Anthropic out in a dispute over weaponising AI. “The initiative … underscores the Pentagon’s concerns about the sudden emergence of private sector-built AI models that can unearth security flaws in digital systems faster than the world’s best hackers,” Politico said.
\nThe group that has been allowed access to Mythos includes AWS, Cisco, CrowdStrike, Google, JPMorganChase, Microsoft, NVIDIA, Palo Alto Networks, and the Linux Foundation.
\nVulnerabilities and mitigants
\nNew Zealand’s NCSC sits within the Government Communications Security Bureau (GCSB) spy agency.
\nIt told RNZ that as frontier models improve, “they will change the cyber threat landscape for organisations because of the ability for malicious actors to find and exploit vulnerabilities at unprecedented speed and scale”.
\nIts UK counterpart – also known as the National Cyber Security Centre – told organisations there to prepare for a “vulnerability patch wave”.
\n“Organisations must act now to prepare for a wave of patches that will address decades of technical debt,” it said, warning that AI was “showing the ability to exploit this technical debt at scale and at pace across the technology ecosystem. As a result, the NCSC [UK] expect there will be a ‘forced correction’ to address this technical debt across all types of software, including open source, commercial, proprietary and software as a service.”
\nAnthropic said the big threats existed in this patch-up transition phase, and that long-term advanced models would benefit defenders more.
\nNew Zealand’s NCSC echoed that, saying in the medium to long term, frontier AI “offers the promise of more secure software code from the outset and a better software development lifecycle.”
\nIt added it was engaged with critical infrastructure providers, tech firms and international government partners to drive resilience and preparedness, and had several times put out guidance.
\nIn summary, the advice to organisations is to:<\/p>\n

Patch frequently
\nReduce the “attack surface” and apply defence in depth
\nReview the vulnerability management policies of software and system supply chains.
\nFrequently monitor for potential compromise.<\/p>\n

“These are all standard practices, but organisations need to do them more quickly and more consistently,” the NCSC said.
\nThe ‘patch wave’ would not be business as usual.
\n“As a result of frontier AI products we anticipate organisations need to prepare for a significant increase in vulnerabilities and incidents. We’ve already started delivering advice to help organisations prepare.”
\nSign up for Ng\u0101 Pitopito K\u014drero, a daily newsletter curated by our editors and delivered straight to your inbox every weekday.<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

NZ at wild frontier of AI superhacking https:\/\/www.rnz.co.nz\/news\/science-and-technology\/596203\/nz-at-wild-frontier-of-ai-superhacking Publish Date: 2026-05-24 05:20:00 Source Domain: www.rnz.co.nz…<\/p>\n","protected":false},"author":1,"featured_media":219558,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/media.rnztools.nz\/rnz\/image\/upload\/s--7GlLZhGj--\/t_tohu-badge-facebook\/v1779578955\/4JO4PFC_227366900_l_jpg?_a=BACCd2AD","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,20,24,31,27],"class_list":["post-219557","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-artificial-intelligence","tag-cybersecurity","tag-exploit","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/219557"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=219557"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/219557\/revisions"}],"predecessor-version":[{"id":219559,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/219557\/revisions\/219559"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/219558"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=219557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=219557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=219557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}