What happened
Fitch Ratings issued an analysis on April 16 warning that AI tools — specifically referencing Anthropic's Mythos model — have fundamentally changed cyber risk by eliminating traditional barriers to vulnerability discovery and exploit development, enabling attackers to identify and weaponise weaknesses at unprecedented speed and scale. Fitch flagged that in the short-to-medium term, vulnerabilities will outnumber patches, creating asymmetric risk for insurers and policyholders alike.
Why it matters
Lower attack barriers, expanded third-party risk chains, and potential step-change increases in attack volume could materially affect cyber insurance pricing, coverage terms, and claims frequency. Boards and risk committees relying on stable cyber insurance economics should reassess assumptions.
Action needed
Review your cyber insurance policy terms for AI-driven incident scenarios; engage your insurer on SLA commitments around AI-assisted patching timelines; quantify third-party AI dependency exposure in your risk register.