What agency leaders need to know before the next client call.

European Regulators Just Called AI-Powered Cyberattacks a Threat to Financial Stability

Last week, the European Systemic Risk Board issued a formal warning that AI-powered cyberattacks now pose a threat to the stability of the EU's entire financial system, not just individual companies. Frontier AI models can find vulnerabilities, write exploits, and launch attacks autonomously at a speed and scale beyond older tools, prompting the EU's overall systemic cyber risk rating to jump from "elevated" to "severe" in a single quarter. The European Central Bank followed immediately, ordering every bank under its direct supervision to submit an action plan by October 31, 2026. It's one of the first times a financial regulator, rather than a security vendor, has treated AI-driven attacks as a board-level financial risk rather than an IT problem, a stance that historically tends to spread to other jurisdictions over time.