Five Eyes warns of AI cyberattack capability as OpenAI ships a security-tuned model

The intelligence alliance known as Five Eyes, which groups Australia, Canada, New Zealand, the United Kingdom and the United States, has issued a public alert warning that AI models capable of carrying out damaging cyberattacks could become available within the next few months. A coordinated public statement from the five signals intelligence services is uncommon. It frames autonomous intrusion capability as a near-term operational concern rather than a research curiosity.

On the same day, OpenAI released GPT-5.5-Cyber, a model specialized for information security work, alongside an update to its Codex Security plugin. According to the announcement summarized in Russian-language AI media, access is restricted to verified users, and the model is tuned to refuse fewer security tasks. That combination, a capable security model with fewer limits on discussing offensive technique, is exactly the dual-use risk the Five Eyes statement describes.

Both claims warrant caution. The Five Eyes warning, as relayed, asserts a timeline without publishing the evaluations behind it, and the GPT-5.5-Cyber details come from a vendor-adjacent social media post rather than independent reproduction. What is verifiable is the direction. A defensive use (faster vulnerability triage and automated patching) and an offensive use (autonomous reconnaissance and exploitation) run on the same model weights. The question of who benefits if the alarm is accurate has two sides, because the agencies raising it also operate offensive programs of their own.

For engineers building security tooling, the immediate change is access policy. A model deliberately less likely to refuse means the verification gate, not the model, is now the point of control, and know-your-customer (KYC) identity checks become the enforcement mechanism rather than the system prompt.