**CBC Urges Stronger Cyber Resilience Amid AI Risks**
The Central Bank of Cyprus (CBC) has issued a call for enhanced cyber resilience in response to a recent warning from the European Systemic Risk Board (ESRB) regarding the increasing cyber threats posed by advanced artificial intelligence (AI) models. The CBC emphasized its commitment to closely monitoring these developments and expects financial institutions to bolster their defenses against emerging risks.
The ESRB's warning highlights the potential of frontier AI models to significantly alter the cyber threat landscape in the near future. According to the board, these advanced AI technologies could make cyberattacks more rapid, extensive, and sophisticated. This shift could lead to an acceleration in the identification of software vulnerabilities, facilitate the creation and use of malicious cyber tools, and drastically shorten the time available for organizations to detect and respond to cyber threats.
The ESRB has characterized these developments as systemic risks that could impact the financial sector as a whole, rather than being confined to individual institutions. In light of this, the board has called for a coordinated response throughout the European Union, engaging national authorities, financial institutions, and critical technology service providers.
In its statement, the CBC reiterated the importance of strengthening cyber resilience among supervised financial institutions. It underscored the need for these institutions to implement necessary measures to safeguard against the evolving cyber threats associated with advanced AI technologies.
This warning from the ESRB coincides with an increased focus on cybersecurity by the European Central Bank (ECB). The ECB has set a deadline of October 31 for euro area banks to submit detailed plans on how they intend to tackle AI-enabled cyber threats that could jeopardize public confidence in the financial system and disrupt payment services.
In a letter addressed to bank executives, the ECB highlighted the profound implications that recent advancements in frontier AI models could have on the confidentiality, integrity, and resilience of banks' information and communication technology systems. The ECB has urged banks to prioritize the protection of internet-facing systems and other vulnerable technology assets, including third-party software and open-source components.
To support banks in focusing their resources on these critical areas, the ECB has postponed a separate information technology survey and may adjust the timing of inspections and other supervisory activities.
The ECB's announcement was accompanied by the ESRB's broader warnings that large-scale cyber incidents could undermine public confidence in financial institutions. In severe cases, such incidents could trigger bank runs or broader market instability, particularly affecting institutions or countries perceived as less secure.
The ESRB outlined several scenarios in which AI-enhanced cyber capabilities could exacerbate existing threats. These scenarios include a gradual decline in confidence in smaller financial institutions, state-sponsored cyber espionage, and coordinated attacks on payment, clearing, and settlement systems. Additionally, the board warned that misinformation campaigns could amplify the effects of cyber incidents, while attacks might spread rapidly through common technology providers and widely used software across the financial sector.
This latest warning reflects the growing concern among European regulators that while advances in artificial intelligence present significant opportunities for innovation and productivity, they also introduce new challenges for cybersecurity and financial stability.
For Cyprus, the CBC's statement indicates that enhancing cyber resilience will remain a key supervisory priority as banks and other financial institutions navigate an evolving threat landscape increasingly influenced by artificial intelligence. The CBC's proactive stance aims to ensure that the financial sector in Cyprus is well-prepared to face the challenges posed by these emerging technologies.
As the landscape of cyber threats continues to evolve, the CBC's emphasis on resilience and preparedness will be crucial in safeguarding the integrity of the financial system and maintaining public confidence in its stability.