One open model now sits months behind the American frontier on cyber and biology, and refused nothing it was asked to do. The closed model refused so often the test could not be finished. Months of capability separate them. The gap in restraint is total. Part four of four.
The White House finished its frontier AI framework on 1 August and has published nothing. The threshold is classified. The benchmarks are classified. Whether open weight models are covered at all remains unanswered. Part three of four on governing what cannot be recalled.
Washington is pushing its AI security perimeter deep inside the data centre, targeting Chinese-made components that move data between GPUs. The policy may reduce cyber and espionage risks, but it could also raise costs, slow construction and expose a new weakness in America’s AI race as AI scales.
AI agents are no longer side experiments. They are becoming live attack surface, carrying access to data, code and identity. For Australian businesses, the message is clear: adoption must be matched with control.
The past week has shown a clear shift in cyber risk. AI agent frameworks are no longer just productivity tools. They are becoming live execution environments that attackers can reach. Security researchers have reported serious flaws across LangGraph, Langflow, coding agents and OpenClaw. The pattern is consistent. These systems often hold access to data, developer tools, credentials and internal systems. When they are exposed to untrusted input, a simple prompt, file, error report or contact card can become a path to code execution. At the same time, ransomware is moving faster. The Gentlemen operation has claimed hundreds of victims and is showing self spreading behaviour. That reduces the time businesses have to isolate systems once compromise begins. The Oracle PeopleSoft zero day is another warning. Attackers exploited a critical flaw before a patch was available, with higher education and enterprise environments among the targets.
For Australian businesses, the cyber perimeter has moved again. It is no longer defined only by email gateways, endpoints, cloud platforms and firewalls. AI agents, developer environments, remote management tools and identity systems are now part of the live attack surface.
That matters because these systems often sit close to the most sensitive parts of the organisation. They can access data, trigger workflows, read internal systems, write code and connect into cloud environments. When they are exposed too quickly, or deployed without proper controls, they give attackers a new way to move from a simple input into privileged action.
The ransomware numbers show why this is not a theoretical concern. According to OpenText Cybersecurity research reported in 2025, two in five Australian companies experienced a ransomware attack in the previous year. Nearly half of those were targeted more than once. While 97 per cent of respondents were confident they could recover, only 11 per cent of attacked organisations fully recovered their data. A further 3 per cent recovered nothing.
That gap between confidence and recovery is the real warning. AI may accelerate productivity, but it also accelerates exposure. Businesses cannot afford to treat agent frameworks, developer tools and remote access systems as experimental side projects. They need to be inventoried, isolated where necessary, stripped of excessive privileges, monitored continuously and governed with human approval for sensitive actions.
The lesson is not to slow down AI adoption. It is to build security into the way AI is deployed from the start. In this next phase, resilience will belong to organisations that understand one simple truth: the new perimeter is not a place. It is every system that can act on behalf of the business.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Washington is pushing its AI security perimeter deep inside the data centre, targeting Chinese-made components that move data between GPUs. The policy may reduce cyber and espionage risks, but it could also raise costs, slow construction and expose a new weakness in America’s AI race as AI scales.
As state-sponsored and financially motivated actors accelerate their exploitation of critical operational technology, a deep technical analysis of 75 global incidents reveals a terrifying reality: the perimeter defending civilian infrastructure has evaporated.
The cyberattack on Origin Energy is not an isolated corporate failure. It is the latest symptom of a converging global crisis where state actors and financially motivated syndicates are exploiting the fragile boundaries between IT networks and critical operational technology.
Iranian-affiliated hackers are actively compromising programmable logic controllers across U.S. water, energy, and government systems. CISA, FBI, and EPA warn the threat will persist regardless of diplomacy. AI-driven automation is accelerating attacks beyond any precedent.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
