Five Eyes
Intelligence alliance of the US, UK, Canada, Australia, and New Zealand; coordinates cyber threat response.
Five Eyes agencies were among ten agencies from seven countries that on 8 October named Integrity Technology Group, a Beijing company, as an enabler of Chinese state-linked hacking traced back to January 2016.
Last refreshed: 12 October 2026 · Appears in 1 active topic
Why did all five Western cyber agencies jointly warn AI threats arrive in months?
Timeline for Five Eyes
Mentioned in: Ten agencies name Beijing firm in hacks
Cybersecurity: Threats and DefencesIssued first joint AI cyber-risk statement declaring months-not-years threat timeline
Cybersecurity: Threats and Defences: Five Eyes warn AI threat is months awayMentioned in: NCSC counts 200+ UK infrastructure hits
Cybersecurity: Threats and DefencesMentioned in: UK cyber bill drops payment regime
Cybersecurity: Threats and DefencesMentioned in: AUKUS names two American sea robots
Autonomous Systems: Land & SeaBackground
The Five Eyes alliance links the intelligence services of the United States, the United Kingdom, Canada, Australia and New Zealand. In cyber security it speaks through national agencies, among them the US Cybersecurity and Infrastructure Security Agency (CISA) and the UK's National Cyber Security Centre (NCSC), which publish joint advisories and name the states and companies behind attacks.
On 22 June 2026 the Alliance issued its first joint statement on artificial intelligence and cyber attacks. It said AI would change both attack and defence, and that AI-enabled mass exploitation of known vulnerabilities was months away, not years. That shortened the 2028 estimate NCSC chief executive Richard Horne had given five days earlier, when he reported more than 200 cyber incidents against UK critical infrastructure in a year.
A joint statement weighs more than one agency's forecast because all five governments put their names to it. the Alliance's 2026 attributions of Chinese hacking also drew in agencies from non-member countries, Japan among them, which widens the reach of its warnings beyond the five.
Chinese telecoms espionage is still live
Chinese state-linked intrusion into telecoms and infrastructure networks is the Alliance's longest-running shared cyber problem. In February 2026 an FBI official said the Salt Typhoon breach was still under way, with at least 200 companies in 80 countries affected. A second group, Volt Typhoon, had by CISA's assessment gained hidden access to American utilities, transport and telecoms.
The response has since spread beyond the five members. Norway's security service confirmed on 23 April that the country was a Salt Typhoon victim, timing the news to a sixteen-agency advisory. On 8 October ten agencies from seven countries named a Beijing firm as an enabler of the campaign, and CISA gave US federal bodies until 11 October to fix five flaws dating from 2015 to 2023.
What countries are in Five Eyes?
What did the Five Eyes say about AI cyber threats in 2026?
Why do Five Eyes joint advisories matter more than single-country warnings?
Who are the Five Eyes cyber agencies that signed the 2026 AI statement?
How does the Five Eyes AI cyber warning connect to the new US patch directive?
