▽ SECURITY & DEFENSE 3 YEARS HORIZON RESOLVES 8 NOV 2029 · in 3.0y

Reported critical infrastructure cyber incidents in the US increase year-over-year in 2027.

Assesses whether threat activity against US networks continues to escalate. Resolution relies on official annual incident counts published by CISA or the FBI.

Across 6 frontier models answering independently, the panel leans yes: the median is 71%.

They broadly agree, 15 points between Qwen at 83% and Claude at 68%.

Nothing is settled until 8 Nov 2029, when the outcome is checked against sources and every number above gets a permanent score.

MODEL BY MODEL

What each one said

  • QwenAlibaba

    CIRCIA mandatory reporting will be in effect by 2027, structurally inflating counts beyond any plausible threat-level dip.

    • CIRCIA final rules published 2024 phase in mandatory reporting; by 2027 covered entities must file, mechanically raising counts vs. prior years.
    • CISA/FBI annual reports have shown YoY increases every year since at least 2020; no precedent for a decline even in lower-threat periods.
    • A methodology change or political decision to suppress publication is the main downside risk, but no current signal points that direction.
    qwen/qwen3.8-max-0902 · asked 9 Nov 2026
    83%
  • GeminiGoogle

    CIRCIA mandatory 72-hour reporting will fully distort the baseline upwards as enforcement and compliance normalize through 2027.

    • CISA CIRCIA rules finalized in 2025-2026 legally compel previously voluntary disclosures, driving official incident tallies up.
    • FBI IC3 and CISA historical reports show critical infrastructure disruptions grew in over 70% of years since 2019.
    • A massive 2026 plateau in geopolitical adversary activity or strict narrowing of CISA's intake scope would reverse this trend.
    google/gemini-3.8-flash · asked 9 Nov 2026
    74%
  • GrokxAI

    CIRCIA-driven reporting plus persistent threat volume make a 2027 > 2026 official CI count the default.

    • CISA/FBI annual CI tallies (CIRCIA, IC3, sector reports) appear 12–18 months after year-end, so 2027 figures land well before 2029-11-08.
    • CIRCIA final rules and mandatory reporting for 16 sectors phase in 2026–27, mechanically lifting counts even if true incidents flatten.
    • FBI IC3 and CISA year-over-year CI/ransomware series rose in most of the last decade; the new mandate puts 2027 above that base unless definitions tighten or a major…
    x-ai/grok-4.6 · asked 9 Nov 2026
    71%
  • DeepSeekDeepSeek

    Turns on whether CISA/FBI's published annual counts keep climbing, which they have every year since 2018.

    • CISA's annual risk-and-vulnerability assessments and FBI IC3 reports have shown rising incident counts nearly every year since 2018, so the base rate favors another…
    • Reporting mandates under CIRCIA (final rules due 2026) should push 2027 counts up mechanically as more entities are legally required to report.
    • A major drop would require either a genuine lull in ransomware/state activity or a definitional change in what counts, neither of which is likely within the window.
    deepseek/deepseek-v4.1-flash · asked 9 Nov 2026
    71%
  • ClaudeAnthropic

    Hinges on whether CISA/FBI reporting trends and actual attack volumes keep rising as in most recent years.

    • Reported CI incidents have increased almost every year since CISA/FBI began standardized tracking, driven by ransomware, state-sponsored intrusions, and OT targeting.
    • Mandatory reporting rules (CIRCIA) are expanding reporting coverage through 2026-2027, mechanically inflating counts even if true incident rates plateau.
    • Main risk to 'yes' is a reporting methodology change, agency restructuring, or data disclosure gap that breaks year-over-year comparability.
    anthropic/claude-sonnet-5 · asked 9 Nov 2026
    68%
  • GPTOpenAI

    The result mainly depends on whether CISA/FBI reporting coverage expands faster than any decline in major intrusions.

    • CISA and the FBI must publish comparable 2026 and 2027 annual figures, likely by the 2028–29 reporting cycle.
    • Recent CISA/FBI reporting shows persistent ransomware, state activity, and broader mandatory incident reporting, making increases more common than declines.
    • A major disruption in reporting definitions or a sharp ransomware decline after new regulations would most reduce the likelihood.
    openai/gpt-5.6-terra · asked 9 Nov 2026
    68%

6 of 6 models answered · 15 points between the highest and lowest. None was shown the market price.

WHAT DO YOU THINK?
loading…

Question sourced from a news sweep on 9 Nov 2026. Forecast by google/gemini-3.8-flash, anthropic/claude-sonnet-5, openai/gpt-5.6-terra, x-ai/grok-4.6, deepseek/deepseek-v4.1-flash, qwen/qwen3.8-max-0902 via OpenRouter.