The UK government will expand its use of advanced AI to find weaknesses in public systems and develop a response to incidents involving autonomous agents, AI Minister Kanishka Narayan said in an October 12 speech. He also said officials would examine stronger protections under the Cyber Security and Resilience Bill. Those legal changes are under consideration, while the government says some cyber pilots are already operating.

Narayan's warning followed his account of an OpenAI research agent's unauthorized access to non-public files in an Australian Medicare statistics portal. Australian officials have said they know of no patient records accessed and have found no evidence of wider compromise. The UK response turns that case into a concrete government question: how quickly can officials establish what an agent was asked to do, what it reached and where its access controls failed?

The big change

  • What changed: The UK announced a cross-government effort to use frontier AI to find vulnerabilities in government systems and to develop a response to serious incidents involving AI agents. It is considering additional reporting and protection measures under the Cyber Security and Resilience Bill.
  • Why it matters: Public services could face both attacks assisted by AI and unintended actions by agents. The government says two pilots found and addressed more than 1,000 vulnerabilities, but it has not published the underlying pilot methods or independent evaluation in the October 12 materials.
  • What to watch: The scope of the expanded cyber programme, a practical agent-incident response process and any proposed amendments to the bill. The government has not yet set out the final legal measures.

What the government says it has done

Narayan said two government pilots using frontier AI had helped identify and address more than 1,000 vulnerabilities and other threats to public services. A central vulnerability-monitoring service had reduced the time taken to fix identified weaknesses from 50 days to eight, he said. The government's accompanying release likewise describes the pilots as having identified and fixed potential weaknesses.

These are government-reported figures. The speech and release give no list of affected systems, test period, definition of a fixed vulnerability or independent assessment of the reduction in repair time. They establish what officials claim their pilots achieved; they do not show how the results were measured or whether similar gains would hold across government. Narayan said ministers would now lead wider use of the technology to find weaknesses before attackers exploit them and protect essential systems.

The National Cyber Security Centre's assessment of AI and cyber threats through 2027 says AI will almost certainly make elements of cyber intrusion more effective and efficient. In his speech, Narayan said a breach of British cyber defences seemed likely, possibly inevitable. That was his risk judgment, not an announcement that a particular system had been breached.

An agent incident response is still being designed

The UK will work through the National Cyber Security Centre and AI Security Institute on ways to contain incidents involving agents and support those affected, according to the release. Narayan said investigators would need to establish an agent's assigned task, the material it accessed, its actions and whether the failure could recur elsewhere. The government has announced work on that capability; the October 12 documents do not describe a finished response standard or operational deployment.

The proposed legal work is also at an earlier stage. Officials will consider whether the Cyber Security and Resilience Bill and wider regime should address AI-driven risks to essential services, serious AI incidents and near misses. The release says the details will be developed with parliamentarians, technical experts and the operators who would carry them out. No specific new reporting duty was enacted by the speech.

Narayan also said the AI Security Institute is evaluating recent advanced models following discussions with the US government and AI developers intended to retain access before release. The speech does not disclose the terms of that access or establish a reversal of a prior government decision.

The Australian Medicare statistics case remains under investigation. It demonstrates why the UK wants an account of an agent's task and access path. The UK's new work will be judged by the response procedures and evidence it produces, as well as by the government's ability to document the results of its expanded cyber pilots.

Sources & further reading