ECB orders eurozone banks to bolster defenses against AI-driven cyber threats

On July 7, the European Central Bank (ECB) issued a directive requiring major eurozone credit institutions to urgently enhance their cybersecurity measures in response to the growing capabilities of artificial intelligence. Claudia Buch, Chair of the ECB’s Supervisory Board, stated that AI allows malicious actors to identify vulnerabilities and create exploits with unprecedented speed. The regulator has given banks until October 31, 2024, to submit detailed plans addressing these systemic risks. Banks are expected to prioritize the protection of internet-facing systems, modernize legacy technology, and improve crisis-management frameworks. To accommodate this, the ECB has postponed an unrelated IT survey and may adjust future inspection schedules. The European Systemic Risk Board warned that large-scale cyber incidents could lead to a loss of public trust and potential financial instability. Banks must also resolve outstanding issues identified in previous 2024 cyber resilience stress tests. The initiative highlights a fundamental shift in the threat landscape that requires proactive management and investment adjustments.