ECB orders big European banks to plan AI cyber defenses

European banking regulators have issued a stark warning that advanced artificial intelligence models now pose a severe systemic risk to the financial system, giving major banks a four-month deadline to formulate defensive plans. On Tuesday, July 7, 2026, the European Central Bank directed the 110 largest lenders under its direct supervision to submit comprehensive action plans by October 31 to counter cyber threats amplified by frontier AI.

The ECB’s supervisory board, chaired by Claudia Buch, sent a letter to bank chief executives stating that these AI developments represent a long-term shift in the threat landscape. While not introducing entirely new risks, they significantly amplify the speed and scale at which such risks materialize, Buch wrote. The letter highlights that emerging AI models can pinpoint software weaknesses and write working exploits at unprecedented speed, collapsing the time between discovering a flaw and weaponizing it.

Banks, including major institutions like Deutsche Bank, BNP Paribas, and Santander, are instructed to detail immediate and longer-term measures. These must prioritize faster software patch management, stronger AI-enabled monitoring systems,...