Dark Reading's six-month automated-attack warning rests on UK AISI capture-the-flag runs where models finished attack chains 3 of 10 times

Dark Reading (via r/artificial, 216 upvotes)·medium signalXBlueskyLinkedInCopy link

The top post on r/artificial (216 upvotes) links a Dark Reading piece arguing companies have about six months before fully automated attacks are routine. The concrete evidence underneath is UK AI Security Institute capture-the-flag testing in June, where Mythos completed an end-to-end 32-step attack chain 3 of 10 attempts and GPT-5.5 did it 2 of 10, plus a July compromise of Taiwanese government servers by a Chinese-speaking group that compressed reconnaissance and execution into four days. Top comments push back that this is already happening rather than six months out, and the article is paywalled to WebFetch, so the statistics here came from search snippets.