MAS convenes banks as autonomous AI cyber risks escalate

Officials are monitoring Anthropic’s Mythos and its ability to identify vulnerabilities.

The Monetary Authority of Singapore (MAS) has convened the chief executives of major financial institutions to discuss artificial intelligence (AI)-enabled cyber threats.

The move comes as the government warned that advanced models are making cyberattacks faster and more sophisticated, Senior Minister of State for Digital Development and Information Tan Kiat How said.

“We view AI-enabled cyber risk as an amplification of an existing systemic risk,“ Tan told Parliament on 5 May. “The fundamentals to strengthen an organisation’s cybersecurity matter more than ever.“

The remarks came in response to parliamentary questions on advanced models such as Anthropic’s Mythos, which has been reported to identify and exploit software vulnerabilities autonomously.

Tan said the government does not have access to Mythos, and Anthropic has released it only to a limited set of partners under a controlled preview. It is also not aware of any local bank that has access to the model.

He added that Singapore is working with partners with access to the model to better understand its capabilities and implications, whilst maintaining ties with major AI labs and cybersecurity firms to monitor developments in frontier systems.

The minister noted AI is reducing the time needed to identify vulnerabilities, allowing attackers to exploit systems faster than traditional patching cycles can respond.

“What we have not yet seen is fully autonomous AI agents running end-to-end campaigns. But this is a matter of time, given the trajectory of technological developments,“ he added.

Meanwhile, the Cyber Security Agency of Singapore (CSA) will issue a letter to the boards and senior leadership of all Critical Information Infrastructure (CII) owners, outlining expectations for reviewing cyber risk posture.

The CSA is also reviewing cybersecurity standards and obligations for critical infrastructure operators to account for faster attack timelines.

Tan said the government is also building in-house AI capabilities for cyber defence. “These are being piloted within the Government and will be extended to more agencies and CII owners when ready.“

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.

Book a meeting

| Or download the media kit (PDF)

240,000 senior readers quarterly in print Top 1,700 Singapore companies reached

7 markets across Southeast Asia