Sam Altman warns that the AI cybersecurity threat is so severe he can't find a word dramatic enough to describe it. Speaking at Stanford Business School, the OpenAI CEO said the recent PHP attacks are child's play compared to what's coming.
His comments add fresh uncertainty for security leaders already reeling from recent cyber incidents. Altman's core message: AI agents will soon launch attacks at a speed and scale we've never seen.
What Altman Actually Said at Stanford
In an interview with Stanford Business School students, Altman didn't hold back his unease about AI's impact on cybersecurity. He admitted he couldn't find a word "dramatic enough to describe the problem that is coming at us."

He stressed that the arrival of AI agents in cybersecurity is "something we haven't taken seriously, neither as organizational leaders, nor as countries, nor as individuals." The warning wasn't abstract—it was a direct call for urgent attention.
Why the Mythos Example Matters
Altman pointed to a chilling example: Anthropic's Mythos model, part of Project Glasswing, found 10,000 severe security vulnerabilities in less than a month. That's not a theoretical risk—it's a real demonstration of AI's power to uncover weaknesses at machine speed.
Some of those vulnerabilities were fixed, but the episode shows how quickly AI can expose critical flaws. For Altman, this is just a small sample of what AI agents can do when they go rogue.
The Real-World Impact on Cybersecurity
AI agents can scan, exploit, and adapt faster than human defenders. That asymmetry threatens everyone from small businesses to national infrastructure.
Altman's warning comes as organizations still grapple with basic security hygiene. The prospect of AI-driven attacks that learn and evolve in real time is a paradigm shift.
- Speed: AI agents can identify and exploit vulnerabilities in minutes, not days.
- Scale: Automated attacks can target thousands of systems simultaneously.
- Adaptability: AI learns from defenses and adjusts tactics in real time.
- Accessibility: AI tools lower the barrier for attackers with limited skills.
- Defense gap: Human-led security teams struggle to keep pace with AI-driven threats.
Who Is Affected by This Warning?
Altman's message targets three groups: organizational leaders, countries, and individuals. Each has a role in preparing for AI-enhanced cyber threats.
Businesses need to invest in AI-powered defense and train staff. Governments must craft policies that anticipate rapid AI evolution. Individuals should stay informed and practice good digital hygiene.
Comparing AI Threats: Then vs. Now
The table below contrasts traditional cyber threats with AI-driven ones, based on Altman's comments and the Mythos example.
| Aspect | Traditional Threats | AI-Driven Threats |
|---|---|---|
| Attack speed | Hours to days | Minutes or seconds |
| Scale | Limited by human resources | Mass automated attacks |
| Adaptability | Static tactics | Real-time learning |
| Skill required | High | Lower with AI tools |
| Example | PHP attacks | Mythos finding 10,000 vulnerabilities |
What to Watch Next
Altman's warning isn't a prediction—it's a call to action. Watch for OpenAI and other AI labs to ramp up safety research and for regulators to respond.
The Mythos incident shows AI's dual-use nature: the same capabilities that find vulnerabilities can also fix them. The question is whether we'll harness AI for defense before attackers weaponize it.
As Altman suggests, the problem is coming whether we're ready or not. The time to take AI cybersecurity seriously is now.
FAQ
What did Sam Altman say about AI and cybersecurity?
At Stanford Business School, Altman warned that AI's impact on cybersecurity will be more dramatic than we can describe, and that we haven't taken it seriously enough as leaders, countries, or individuals.
What is the Mythos example Altman mentioned?
Mythos is an Anthropic model within Project Glasswing that found 10,000 severe security vulnerabilities in less than a month. Altman cited it as a small sample of AI's potential for finding and exploiting weaknesses.
Why does this matter for everyday people?
AI-driven cyber threats can affect anyone—from personal data breaches to critical infrastructure attacks. Altman's warning highlights the need for awareness and preparedness at all levels.
What can organizations do to prepare?
Organizations should invest in AI-powered security tools, train employees on emerging threats, and advocate for policies that keep pace with AI development.
Altman's stark warning echoes his broader views on AI risk. He has previously stated that AI's negative consequences are inevitable, a theme that resonates with his Stanford remarks. The cybersecurity threat is just one facet of a larger challenge.
Yet Altman also argues that we must accept AI risks for transformative benefits. In his view, the potential rewards—like AI finding vulnerabilities before attackers do—justify the dangers. This tension between risk and reward is central to the debate over accepting AI risks for transformative benefits.
As AI agents become more capable, questions of trust and safety loom large. Altman has asked for public trust in AI, promising that OpenAI will prioritize safety. His call for trust in AI is a key part of OpenAI's public stance, but skeptics wonder if safety pledges can keep up with the rapid pace of development.
Critics argue that Altman profits from AI while society bears the risks. This AI risk debate is especially relevant when considering cybersecurity, where a single vulnerability can have cascading effects. The stakes are high, and the public is watching.
Legal challenges are also mounting. British Columbia recently sued OpenAI and Sam Altman over a school shooting, raising questions about accountability for AI harms. This lawsuit against OpenAI and Sam Altman could set a precedent for how AI companies are held responsible for real-world impacts.
Altman himself has acknowledged that AI will make bad things happen, and that the cost could be deadly. His warning about AI's deadly cost underscores the seriousness of the cybersecurity threat. The question is whether we'll act in time.