Keith Prabhu, founder and CEO of Confidis, also argued that models such as GPT-5.6-Cyber may accelerate vulnerability discovery and weaponization without fundamentally shifting the attacker-defender balance, because attackers and defenders are likely to gain access to broadly similar capabilities
Governance for high-risk cyber AI
Enterprises using frontier cybersecurity AI models should impose tighter internal access controls, isolate them in air-gapped or highly restricted environments, and maintain comprehensive logging, monitoring, and anomaly detection, according to Lian Jye Su, chief analyst at Omdia.
Mahapatra said identity verification, monitoring, sandboxing, and restricted access are necessary but not sufficient. Enterprises should also require formal authorization for high-risk activities, retain human oversight, and review model outputs before they are acted on.
