Following a devastating wave of global cyberattacks, Jason D. Clinton, Deputy Chief Information Security Officer (CISO) at Anthropic, has issued a grim forecast for the tech industry: the digital security landscape is going to deteriorate significantly before it improves.In a stark post on X (formerly Twitter) on October 22, Clinton addressed the current crisis directly. "As bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better," he wrote.The recent chaos he references has been characterized by a relentless string of severe digital incidents over the month of October.
The cybersecurity world has been scrambling to contain millions of attempts to exploit a critical PHP code flaw globally, the weaponization of zero-click spyware through online ads, and massive data breaches.For Clinton, this onslaught is exactly what he predicted late this summer. On August 21, 2026, he posted an ominous warning on X that largely went unheeded at the time: "The vulnerability tsunami is coming in just a few months and there won’t be enough time to patch critical infrastructure.
Now that the "tsunami" has made landfall, Clinton is urging security leaders to use the current climate of panic to their advantage, but not in the way one might expect from an executive at a leading artificial intelligence lab.He advised companies to immediately go to their boards and demand urgent help. Interestingly, his instruction was explicitly not to ask for advanced AI defense budgets, but to focus entirely on funding and fortifying basic cybersecurity measures.
According to Clinton, the tech world simply needs to "hold on for ~18 months.”The 18-Month Horizon and 'Vulnzero'When asked by an X user on what exactly changes after this 18-month window, Clinton outlined a future concept he refers to as "vulnzero" (zero vulnerabilities).He explained that AI scaling laws will soon compress highly advanced cyber capabilities into small, affordable models. Once this threshold is crossed, software developers globally will be able to utilize these AI tools for "fractions of pennies on the dollar" to detect and permanently eliminate security bugs before code is ever shipped to production.However, until that verification technology is universally accessible and integrated into standard development pipelines, malicious actors hold a temporary, devastating advantage.
Hackers are currently leveraging existing AI models to rapidly discover, automate, and exploit legacy bugs much faster than human defenders can patch them.Taking the BlameUnsurprisingly, the stark warning drew sharp criticism across social media, with many pointing the finger directly at AI firms for accelerating the threat landscape before defenses were ready. One user quoted Clinton's post, stating, "You and your cohorts created this monster.
Now you want us to help you clean it up."Rather than deflecting responsibility or offering corporate PR speak, Clinton met the criticism head-on."Yes. It was always going to be this way," he replied. "We tried to warn the world."- Ends

