ESRB urges EU action on frontier AI cyber risks in finance

The European Systemic Risk Board has warned that frontier AI models could strain cyber resilience in the EU financial system by increasing the speed, scale and sophistication of cyberattacks.

The warning follows the ESRB General Board’s assessment that systemic cyber risk has risen to ‘severe’, up from ‘elevated’ earlier this year.

The ESRB defines frontier AI models as advanced AI models capable of materially affecting offensive or defensive cyber operations.

According to the Board, these models may eventually strengthen cyber resilience, but in the short to medium term, they are likely to give threat actors an advantage.

The ESRB said frontier AI can help attackers discover vulnerabilities and execute cyberattacks more quickly and at greater scale.

It also warned that the concentration of leading AI providers outside the EU creates strategic dependency and geopolitical risks.

The Board called on the EU to scale up capacity, expertise and strategic autonomy in frontier AI and cybersecurity.

It said the response should involve AI providers, software providers, security firms, open-source maintainers, financial institutions and authorities at the national and the EU level.

The ESRB said it will continue monitoring the development and use of frontier AI models with cyber capabilities and their impact on the financial sector from a systemic risk perspective.

Why does it matter?

The ESRB warning puts frontier AI into the financial stability debate. If advanced AI models help attackers identify vulnerabilities and launch cyberattacks more quickly, financial institutions could face shorter response windows and greater systemic risk. The warning also links cybersecurity to the EU strategic autonomy, because dependence on non-EU AI providers could affect the resilience of Europe’s financial infrastructure during crises.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!