CNA Explains: What is frontier AI and how Anthropic’s Mythos is reshaping cybersecurity

Why are these risks a growing concern? 

The implications are particularly serious at a national level, experts said.

Critical infrastructure, such as banks, telecommunications networks, healthcare systems and energy grids, relies on complex interconnected digital systems. 

Many of these depend on layers of third-party and open-source software, which may contain hidden vulnerabilities.

Sophisticated state actors could leverage frontier models to launch automated and frequent attacks on critical infrastructure, Mr Lim said.

Frontier AI also allows threat actors to scan for weaknesses at scale, said Dmitry Volkov, chief executive and co-founder of cybersecurity firm Group-IB.

“Every country has many organisations that are part of its critical infrastructure,” he said. “These organisations also rely on long lists of software products, many of which may contain vulnerabilities.”  

An attack on a single sector could therefore ripple across others.

In Singapore, for instance, banks, hospitals, power grid, transport networks and telcos are deeply interconnected, Mr Dutt noted, which means a potential AI-accelerated attack on any one of them would not just be an IT problem.

“For businesses, the equivalent is stark – one careless moment with an AI tool can expose years of trade secrets or an entire customer database in seconds,” he said.

Which sectors are most at risk?

As cyberattacks are driven by profit, data exfiltration and disruption, Mr Lim said industries that fit the target profiles of these attacks will be most at risk. 

These include companies that move financial transactions, handle sensitive data and manage critical infrastructure, he added.

“Supply chain attacks should also be considered, as downstream organisations may not have the budget or expertise to secure their environments as rigorously as regulated industries,” Mr Lim said. 

Globally, the finance sector has been thrust into the spotlight as authorities scrutinise its ability to combat risks posed by powerful AI models. 

“Financial services and banking are highly exposed because they are digital, interconnected, and attractive to both criminals and nation-state actors,” said Mr Volkov.

“AI could accelerate fraud, phishing and attacks on banking applications.”