ECB Urges Major European Banks to Address AI-Driven Cyber Threats
Poinews.com – On Tuesday, the European Central Bank (ECB), Europe’s leading banking regulator, instructed major financial institutions to develop comprehensive strategies to counter the growing threat of AI-enhanced cyberattacks. With advancements in artificial intelligence models like Anthropic’s Mythos, the risk landscape for banks is shifting rapidly, prompting the ECB to emphasize proactive preparedness.
New Cybersecurity Challenges and ECB’s Directive
The ECB’s supervisory board issued a directive to 110 banks under its oversight, highlighting that AI technologies are not just a fleeting trend but a fundamental transformation in cybersecurity risks. Claudia Buch, chair of the supervisory board, noted in a letter that “these developments do not introduce entirely new risks, but they significantly amplify the speed and scale at which such risks materialise.”
“While these developments do not introduce entirely new risks, they significantly amplify the speed and scale at which such risks materialise,” wrote Claudia Buch, chair of the ECB’s Supervisory Board.
Banks are now required to submit detailed plans by October 31, outlining both immediate and long-term steps to bolster their defenses. The focus includes accelerating software updates, deploying AI-driven monitoring tools, and auditing third-party tech providers for potential vulnerabilities. The ECB emphasized that these measures must originate from top leadership within each institution.
To provide flexibility, the ECB delayed its annual IT Risk Questionnaire from September 2026 to February 2027. It also hinted at reviewing other supervisory processes individually, depending on each bank’s specific needs. Following the deadline, the central bank will assess all submitted plans, collaborate with institutions, and compare findings to highlight shared challenges and effective practices.
ESRB’s Warning on Systemic Risks from Frontier AI Models
Meanwhile, the European Systemic Risk Board (ESRB) issued a parallel warning, stating that cutting-edge AI models pose systemic threats to the EU’s financial sector. The ESRB upgraded its risk assessment from “elevated” to “severe” in June, citing AI’s role in accelerating cyber incidents. It argued that AI is being leveraged by malicious actors to exploit software weaknesses more efficiently than before.
“AI is already being used by malicious actors to enhance cyber-attacks,” said the ESRB. “Frontier AI models represent a paradigm shift in cybersecurity and have become a source of systemic risk to the EU financial system.”
The ESRB also warned about the EU’s reliance on AI developers based outside the bloc. This dependence, it argued, could expose Europe to geopolitical and strategic risks. Anthropic, a key player in AI development, has been refining its models, initially restricting access to Mythos due to fears of misuse. The company later released a public version with enhanced security features last month.
Both the ECB and ESRB stress the need for coordinated action. While the ECB focuses on operational readiness, the ESRB highlights broader implications for the financial system’s stability. Their combined efforts aim to ensure Europe’s banks remain resilient against the evolving threat of AI-powered attacks.
