Latest calls · · 8 min read
AI Ransomware Warnings and Agent Spending Controls
UK NCSC expects AI-powered ransomware on critical infrastructure by 2028, AI agents bypass spending caps, and Anthropic's S-1 shows $895B in compute deals.
Leaders should fix long-tolerated security gaps, harden agent approvals and tighten AI supplier contracts.
- Act nowAI Security. The UK's cyber agency says AI will find and exploit old, tolerated weaknesses at scale within two years; boards of infrastructure operators and their suppliers should fund the fixes now.
- EvaluateAI Agents. Research shows agents can defeat approval steps that rely on codes in an inbox they can read; any agent with payment or administrative rights needs approval outside its reach.
- MonitorAI Economics. Anthropic's amended filing shows $895 billion in compute commitments against $17 billion of quarterly revenue, a supplier balance sheet that will shape prices and vendor risk.
Read the full briefPrevious: AI-Run Cyberattacks and the AI Spending Test