European Systemic Risk Board warns: frontier AI models pose systemic cyber risks to the financial sector

What happened

The European Systemic Risk Board (ESRB) issued a warning on July 7, 2026 (dated June 25, 2026) on systemic cyber risks stemming from frontier AI models (FAIMs). European supervisory authorities EBA, EIOPA, and ESMA welcomed and supported the warning.

Context and impact

Frontier AI models enable threat actors to discover vulnerabilities, generate working exploits, and autonomously execute full-scale cyberattacks at speed and accuracy far exceeding previous AI models. The EU framework (DORA and AI Act) provides a foundation, but the pace of development concerns regulators.

Details

• ESRB warning issued July 7, 2026 (dated June 25, 2026)
• FAIMs capable of autonomous vulnerability discovery and exploit generation
• Backed by: EBA, EIOPA, ESMA (three European supervisory authorities)
• Call to strengthen cybersecurity capacity for financial institutions
• ECB simultaneously writing letters to significant institutions
• Existing framework: DORA and AI Act — foundation exists but insufficient for pace of development