Frontier AI: what you need to know | National Cyber Security Centre icons/chevron/16px/black<br>Skip to main content<br>Please enable JavaScript in your web browser to get the best experience.

Frontier AI: what you need to know<br>Organisations need to be ready to counter the enhanced capabilities of AI-powered attacks.

What is frontier AI and why it matters for cyber security

Artificial intelligence (AI) is no longer a distant or speculative issue for cyber security.<br>The most advanced tools, often referred to as frontier AI , already make it easier, faster and cheaper for attackers to discover and exploit weaknesses. This means that tasks which once required specialist skills – such as writing exploit code, understanding system architecture or using attack tools – can increasingly be automated using AI. This lowers the barrier to entry for sophisticated cyber attacks and allows attackers to operate at greater speed and scale.<br>For organisations, this means that weaknesses in basic cyber security practices are more likely to be discovered and exploited.<br>Responding to this means 2 things:<br>Fully adopting and embedding cyber security fundamentals across the organisation.<br>Recognising cyber security is a core leadership responsibility that requires sustained attention and investment.<br>The NCSC's Cyber Governance for Boards provides resources to support business leaders.<br>Organisations that act now to improve their cyber security fundamentals will be in a much better position to meet the challenges AI can bring.

The emerging role of agentic AI<br>Agentic AI is a new class of frontier AI which is beginning to appear in organisations.<br>Agentic AI tools don’t just generate content or predictions; they can plan tasks, make decisions and take actions on a user’s behalf.<br>Agentic AI is likely to offer significant benefits to organisations in many scenarios, particularly where tasks are repetitive, well-understood and low risk. This is what makes them useful, but also means they can introduce new security risks if they are poorly governed or misused.<br>As agentic AI tools become more widely deployed, organisations will need clear oversight of how they are used and what access they have to systems and data.

AI can strengthen cyber defence

AI is not only benefiting attackers, but can also significantly improve and accelerate cyber defence.<br>Technology providers are increasingly using AI to identify and fix vulnerabilities in their products and services throughout their lifecycles, keeping customers and users safe from new threats. Organisations that adopt AI securely, while maintaining strong cyber security fundamentals, will be better placed to take advantage of these defensive capabilities. In doing so, organisations will be demonstrating to customers, prospects and suppliers that cyber security is taken seriously at the highest level, and that they’re ready to face future challenges with confidence.

What this means for board members and senior leaders

Frontier AI tools lower the barrier to entry for sophisticated attacks, and are already being used to identify vulnerabilities at scale.<br>Put simply, AI is making it easier and faster for criminals to attack those organisations that do not have basic cyber security protections in place.<br>AI does not change the fundamentals of cyber security, but it raises the stakes when those fundamentals are missing.

Key takeaway<br>The NCSC believes that AI will change the game for both offensive and defensive cyber security capabilities.<br>Maintaining strong cyber security fundamentals remains the most effective way to protect your organisation from digital threats, whether those are AI-assisted or not.<br>Organisations that act now by managing cyber security as a leadership priority, and adopting AI carefully and securely, will be best placed to benefit from the opportunities AI offers while remaining resilient to evolving threats.

Want to know more about artificial intelligence?<br>The NCSC publishes accessible content to help you make sense of the fast-moving world of AI.

Retaining defensive advantage in the age of frontier AI cyber capabilities<br>As AI accelerates vulnerability discovery, organisations must raise their security baselines to safeguard their cyber security.

Thinking carefully before adopting agentic AI<br>When it comes to using agentic AI, make sure you can walk before you run.

10 questions to ask when using AI models to find vulnerabilities<br>Using Artificial Intelligence to find vulnerabilities can bring added security considerations.

Impact of AI on cyber threat from now to 2027<br>An NCSC assessment highlighting the impacts on cyber threat from AI developments between now and 2027.

Artificial intelligence: a deeper look<br>The following resources have been created by the NCSC for security professionals and the wider technical community.

Preparing for a ‘vulnerability patch wave’<br>Organisations must act now to prepare for a wave of patches that will address decades of technical debt.

Why...