Europe’s banking regulator has a new fear: an AI model clever enough to break into the financial system. It wants every big bank to have a plan by October.
The European Central Bank has a warning for the euro area’s largest banks. Frontier AI now poses a serious cyber threat, and lenders must draw up plans to counter it, Politico reports. Claudia Buch, who chairs the ECB’s supervisory board, wrote to bank chief executives. She set a deadline of end-October.
What the ECB wants #
Buch asked lenders to patch software faster and harden their AI-enabled cyber defences. She also wants tighter oversight of the outside technology providers they lean on. Over the longer term, banks must modernise ageing infrastructure and sharpen their crisis response.
The order carries no fines. Banks that ignore it face no formal sanction. The ECB says it may still use the plans to rank lenders against each other and press the laggards.
The Mythos effect #
One model looms over the letter: Anthropic’s Claude Mythos. Anthropic says Mythos can find unknown flaws in IT systems. It claims the model has already spotted thousands of severe vulnerabilities across major operating systems and browsers. The company first limited who could use it, which spread unease across European finance.
Buch put the worry plainly. Emerging models can pinpoint software weaknesses and write working exploits “at unprecedented speed,” she wrote. That collapses the gap between finding a flaw and firing through it.
A systemic risk, not just a bank problem #
The ECB did not act alone. The same day, the European Systemic Risk Board lifted its assessment of systemic cyber risk to “severe.” It said frontier AI should now count as a source of systemic risk in its own right.
The board flagged a second worry. Nearly all the leading AI providers sit outside the European Union. That leaves the bloc dependent on foreign firms and exposed to geopolitical pressure. It urged Europe to build up its own AI muscle.
Why it matters #
The move fits a wider European scramble. ECB President Christine Lagarde warned last month that AI could trigger a dangerous financial crisis. The ECB has already run 109 banks through a severe cyber-attack drill. The threat is not hypothetical either, with state-backed attacks climbing and European bodies such as France’s statistics office already hit.
A market has sprung up around the fear. French startup Mistral has opened talks with European banks to sell a flaw-hunting tool. It is one of several firms racing to offer a home-grown answer to Mythos. For now the regulators sound clear on the danger and vaguer on the fix. Banks have until October to show they are ready.
Get the TNW newsletter #
Get the most important tech news in your inbox each week.