European banking regulators have issued a stark warning about the systemic risks posed by advanced AI models, giving 110 lenders a tight four-month deadline to develop comprehensive action plans against AI-driven cyber threats. Claudia Buch, chair of the European Central Bank’s supervisory board, mandated that banks outline concrete measures, resource allocation, and clear responsibilities by the end of October.

The European Systemic Risk Board echoed these concerns, stating that modern AI can exploit IT vulnerabilities with unprecedented speed and accuracy, representing a "paradigm shift" for cybersecurity. These advanced models can weaponize bugs in minutes, significantly elevating the threat level for financial institutions.

To accommodate the urgency, the ECB will postpone its annual IT risk questionnaire deadline to February. Banks are now tasked with rapidly enhancing their IT security capabilities, focusing on rapid detection and defense against large-scale attacks, and ensuring third-party providers meet similar standards. This regulatory push signals a significant compliance burden and increased operational focus on cybersecurity for European banks facing evolving digital threats.