The European Systemic Risk Board Says Financial Authorities Should Ensure That Private Financial Institutions' Boards Are Fully Committed to Mitigating Cyber Risks From Frontier AI Models

The European Systemic Risk Board adopted Warning ESRB/2026/3 on June 25, 2026, "on systemic cyber risks stemming from frontier artificial intelligence models," and it was published in the Official Journal of the European Union on July 16. The board calls it "a warning of a general nature." Parts of it follow, not the whole.

A Source of Systemic Risk

The warning describes frontier AI models, which it calls FAIMs, as models that leading AI providers have developed and that are "highly capable in the cybersecurity domain and able to carry out fully automated cyber-attacks on complex systems, including through vulnerability discovery and the development and weaponisation of exploits." The ESRB "considers these developments to be a source of systemic risks to the financial system."

It says crafting a weaponized exploit was previously largely done by hand and took human experts days or weeks, "whereas it can now be done by FAIMs in a matter of minutes or hours." The board also expects these models to strengthen defenses, but says those capabilities "are likely to gradually materialise over the next few years," requiring financial institutions to operate through a transitional period of elevated risk.

Patching and Testing

"Current patching practices in the financial system are predominantly reactive, relying on periodic updates and ad hoc responses to disclosed vulnerabilities." With more vulnerabilities, the warning says, "current practices may become insufficient to maintain operational resilience."

The increase in volume, it says, exposes current patching processes to overloading, as they prioritize remediation by risk and require testing of software patches before implementation to ensure operational stability. If too many vulnerabilities with critical impact are discovered within a short timeframe, so that the number of critical software patches required is substantially increased, the warning says, "financial institutions may have to decide between leaving themselves exposed to significant cyber risks, or reducing the patch-testing requirements and thereby risking operational incidents and outages."

Visibility, Boards and Follow-Up

The warning also says that "establishing and maintaining visibility of AI deployment within any financial institution" is challenging, given that AI is used in customer interfaces, internal agents, business processes and integration with third parties.

On who answers, it says that "Financial authorities should also ensure that private financial institutions' boards are fully committed to mitigating FAIM-driven cyber risks, that clear governance and accountability frameworks are in place, and that timely responses are adequately planned, along with corresponding internal investments."

As one example of authorities' initiatives, the warning records that the ECB, in its role as banking supervisor, had asked significant institutions to assess without delay the impact of the evolving threats, and "to develop by 31 October 2026 a comprehensive action plan outlining concrete measures aimed at addressing such risks."

For its own part, the ESRB says it "will reassess developments in each quarterly risk assessment at the General Board level and consider other actions when needed."