About

JPMorgan's Dimon Urges Firms to Harden Cyber Defenses as AI Threats Escalate

Published
Score
54

Why it matters

JPMorgan Chase CEO Jamie Dimon told business leaders that cyber risk has grown since new AI models emerged, calling it the company's biggest risk "by far." In a WSJ Leadership Institute conversation with Alan Murray, he urged firms to act immediately: segment their networks, tighten identity and access management, and use their strongest AI tools to find weaknesses before attackers do. He also said companies must get better at fixing the flaws they find and should make remediation a standing item in management meetings. Dimon is focused on critical infrastructure and the supplier networks companies rely on. He chairs the Alliance for Critical Infrastructure on an interim basis. The group includes about 50 companies, among them JPMorgan and Mastercard, and he has been recruiting more CEOs to join. He has linked the escalation to Anthropic's Mythos model, saying in an October 6 Bloomberg TV interview that risk rose tenfold after Mythos. Separately, the same day brought news of doubleAI, a Tel Aviv startup backed by Nvidia, which launched Maxwell, a product it describes as a code execution model that runs inside live programs to improve performance. The company says Maxwell cut an early customer's compute costs by 67% and that it plans to charge customers a share of the savings.

Maxwell is in early access, and its headline results, including a reported 38-fold speedup in data pipelines, come from the company and early customers. They have not been independently verified at scale. The effect of Dimon's Mythos claim is also his own characterization, not a measured industry figure. The Alliance's membership and the reach of its code-review work are described only in general terms. Dimon has also said that giving AI agents access to bank accounts is the customer's own decision, and JPMorgan says it blocks third-party agents that obtain banking credentials. How other large banks will respond has not been announced.

For attorneys, the near-term items are vendor and supplier diligence, since Dimon's focus is on third-party networks, and contract terms covering AI agents that access client accounts or credentials. Clients should be asked whether their security programs treat patching as a tracked governance item and whether they have reviewed network segmentation and identity controls. Foreign-national hiring policies deserve a look too, given Dimon's citation of an espionage case and his call for FBI vetting. On the cost side, the hourly price of Nvidia H100 chips on one-year contracts has risen 60% in a year, according to SemiAnalysis as cited by the WSJ. Any client whose budgets or pricing depend on compute should plan for that pressure.

Sources

mail Subscribe to Artificial Intelligence email updates

Primary sources. No fluff. Straight to your inbox.

Also on LawSnap