AI cybersecurity risks have multiplied by ten since the arrival of advanced AI models, according to JPMorgan Chase CEO Jamie Dimon. In a recent Bloomberg interview, Dimon said the threat landscape has shifted dramatically, and the rise of AI agents will only make matters worse.
His warning comes shortly after Anthropic introduced Mythos, a model that the company itself said can outperform most humans at finding and exploiting software vulnerabilities. That admission has fueled concerns across the financial industry and beyond.
What Dimon Said About AI Cybersecurity Risks
Dimon has been sounding the alarm on AI-driven cyber threats for months. But his latest comments put a number on the problem: a tenfold increase in risk since Mythos entered the picture.

He described the concern as "legitimate and real," especially as AI agents become capable of executing tasks autonomously. These agents can scan for weaknesses, launch attacks, and adapt in ways that traditional security tools struggle to counter.
While Dimon did not provide hard data to back the tenfold figure, his position as head of the largest U.S. bank gives the estimate weight. JPMorgan spends billions on technology and cybersecurity each year, and its leader is now publicly acknowledging a new level of danger.
Why Mythos Changed the Conversation
Anthropic's Mythos model, unveiled in April, was designed to be exceptionally good at cybersecurity tasks. According to Anthropic, it surpasses almost all humans—except the most expert—at finding, exploiting, and defending against vulnerabilities.
That capability is a double-edged sword. The same skills that make Mythos useful for defense can be repurposed for offense. Anthropic reportedly decided not to release it broadly for this reason, but the genie is out of the bottle: the techniques and insights from such models will inevitably spread.
Dimon's timeline aligns with Mythos's arrival. He noted that before Mythos, he was already worried, but now he sees unknown vulnerabilities being created at a pace that security teams can barely track.
The Rise of AI Agents and Autonomous Threats
AI agents are software programs that can perform tasks without human intervention. In cybersecurity, that means an agent could probe a network, identify a flaw, and exploit it—all without a human hacker at the keyboard.
This autonomy is what worries Dimon most. "With AI agents, things will only get worse," he suggested, because the speed and scale of attacks could overwhelm traditional defenses. Security teams that rely on manual review and periodic patching will find themselves outmatched.
The financial sector is a prime target. Banks hold sensitive data and move huge sums daily, making them attractive to both criminals and state actors. A tenfold increase in risk, if accurate, would demand a complete rethink of security strategies.
Key Takeaways for Businesses and Individuals
- AI has changed the threat landscape: The tenfold risk increase cited by Dimon signals a new era where AI-powered attacks are faster and more sophisticated.
- Mythos set a new benchmark: Anthropic's model demonstrated capabilities that blur the line between offense and defense, raising concerns about misuse.
- AI agents amplify the problem: Autonomous agents can execute attacks without human oversight, increasing both speed and scale.
- Traditional security is insufficient: Organizations need AI-driven defenses and continuous monitoring to keep up with AI-driven threats.
- Leadership awareness is rising: When the CEO of JPMorgan speaks out, it signals that cybersecurity is now a board-level issue.
How the Financial Industry Is Responding
Banks and financial institutions are already investing heavily in AI-powered security tools. These systems can analyze network traffic, detect anomalies, and respond to threats in real time—often faster than human analysts.
But the arms race is ongoing. As defensive AI improves, attackers will also adopt AI, creating a cycle of escalation. Dimon's warning suggests that the industry may be losing ground, at least for now.
Regulators are also paying attention. Government agencies are considering new rules for AI development and deployment, particularly for models with dual-use potential like Mythos. The challenge is balancing innovation with security.
| Risk Factor | Before Advanced AI | After Advanced AI (e.g., Mythos) |
|---|---|---|
| Vulnerability discovery speed | Human-paced (weeks to months) | Automated, near-instant |
| Attack scalability | Limited by human resources | Highly scalable with AI agents |
| Defense complexity | Manageable with traditional tools | Requires AI-driven defenses |
| Unknown vulnerabilities | Discovered gradually | Created and exploited rapidly |
What to Watch Next in AI Cybersecurity
Dimon's comments are a signal that the conversation around AI and cybersecurity is shifting from theoretical to urgent. Expect more financial institutions to disclose AI-related risks in their filings and to invest in advanced threat detection. The background to this story is set out in JP Morgan CEO Jamie Dimon Pressed by Senator Over Epstein Ties. A related thread runs through JP Morgan CEO Jamie Dimon Warns UK Chancellor Against Bank Tax Hike. Earlier coverage in This Dog Decided To Ignore How Tall She Has Grown, Still Sleeps On Her Sister’s Back shows how the argument developed.
Anthropic and other AI developers will face pressure to implement safeguards and to share threat intelligence with defenders. Whether they can prevent their models from being misused remains an open question. A closer look at the same subject appears in Grown-Up Soft Drinks: The Rise of Adult Non-Alcoholic Beverages. Anyone following the wider picture can start with British Chocolate Bar Made with Reading-Grown Cocoa Beans. The same theme surfaces in Technology: latest articles, which takes a different angle.
For individuals, the advice is familiar but more critical than ever: use strong, unique passwords, enable multi-factor authentication, and stay informed about emerging threats. The AI era brings unprecedented convenience, but also unprecedented risk. Context on how this played out before sits in Spain's CNI Seeks 17 Tech Profiles to Counter AI and Quantum Threats. A companion piece, AI Risk Is Not Extinction: 300 French Supermarkets Hacked, approaches the same subject from another angle.