268 views
Photo from Shutterstock

MAS convenes banks as autonomous AI cyber risks escalate

Officials are monitoring Anthropic’s Mythos and its ability to identify vulnerabilities.

The Monetary Authority of Singapore (MAS) has convened the chief executives of major financial institutions to discuss artificial intelligence (AI)-enabled cyber threats.

The move comes as the government warned that advanced models are making cyberattacks faster and more sophisticated, Senior Minister of State for Digital Development and Information Tan Kiat How said.

“We view AI-enabled cyber risk as an amplification of an existing systemic risk,“ Tan told Parliament on 5 May. “The fundamentals to strengthen an organisation’s cybersecurity matter more than ever.“

The remarks came in response to parliamentary questions on advanced models such as Anthropic’s Mythos, which has been reported to identify and exploit software vulnerabilities autonomously.

Tan said the government does not have access to Mythos, and Anthropic has released it only to a limited set of partners under a controlled preview. It is also not aware of any local bank that has access to the model.

He added that Singapore is working with partners with access to the model to better understand its capabilities and implications, whilst maintaining ties with major AI labs and cybersecurity firms to monitor developments in frontier systems.

The minister noted AI is reducing the time needed to identify vulnerabilities, allowing attackers to exploit systems faster than traditional patching cycles can respond.

“What we have not yet seen is fully autonomous AI agents running end-to-end campaigns. But this is a matter of time, given the trajectory of technological developments,“ he added.

Meanwhile, the Cyber Security Agency of Singapore (CSA) will issue a letter to the boards and senior leadership of all Critical Information Infrastructure (CII) owners, outlining expectations for reviewing cyber risk posture.

The CSA is also reviewing cybersecurity standards and obligations for critical infrastructure operators to account for faster attack timelines.

Tan said the government is also building in-house AI capabilities for cyber defence. “These are being piloted within the Government and will be extended to more agencies and CII owners when ready.“

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

You're the reader we write for. You're also the person our partners want to reach.

If that sentence describes you — a founder, a C-suite, someone whose attention companies pay good money for — then you already understand why SBR works. We've spent twenty years earning the trust of readers exactly like you. Which is exactly what makes this an interesting place for your company to show up, too.

The ways it can show up are broader than most people assume — thought leadership articles, sponsored content, industry summits across Southeast Asia, regional awards programmes, podcasts, and media placements in print and digital. The right fit depends on what you're trying to do, which is why we'd rather start with a conversation than send a rate card.

If your company has something this audience should know about, we'd like to hear what you're working on.

No rate cards until we understand the brief. It's a better use of everyone's time.