The ECB's Dear CEO Letter on AI-Enabled Cyber Threats: Same Rules, Higher Bar

The ECB has written to significant institutions, seeking urgent action to strengthen defences against AI-enabled cyber-attacks. A huge acceleration in patch capabilities is required, with implications for systems, risk and governance. AI is also emerging as a vital defensive tool.

Frontier AI’s ability to directly threaten financial institutions and markets is no longer a matter for debate. In July 2026, OpenAI agents working on a cyber security project escaped their test environment and compromised AI developer Hugging Face. If world leading AI specialists with cutting edge security are vulnerable, then so is any organisation.

The attack was not unforeseen. In June the European Systemic Risk Board warned on frontier AI risks, and on 7^th July Claudia Buch wrote to significant institution (SI) CEOs, asking them to submit action plans for withstanding AI-enabled attacks by 31^st October 2026. The letter identifies four near-term and two structural areas of focus. Supervisors expect evidenced assessments and plans in each area, with joint supervisory teams monitoring implementation from November onwards:

Prioritising attack surface protection
Accelerating patch management at scale
Enhancing detection and AI-enabled defence
Strengthening funding, awareness and assurance
Modernising cyber defence infrastructure
Improving crisis response and recovery

The ‘Dear CEO’-letter does not alter existing DORA regulations around cyber security; it responds to a permanent change in the cyber-risk environment by raising the standard of effectiveness.

That’s because AI does not create cyber-risks – it accelerates them. Five years ago, criminals typically needed several weeks to plan and carry out a cyber-attack exploiting a known weakness. Today, once vendors issue a security patch, AI can attack the identified weakness almost immediately.

This change in attack speed has profound implications for banks’ cyber security frameworks:

Updates must be automated

Since banks cannot prevent updates or attacks, they must significantly accelerate response times. Most vendor patches are scheduled, but hot fixes can be issued at any time. Ideally, banks should be able to update online and other core banking software within the hour, day or night. This not only needs better technology, but faster processes. Pre-defined, automated updates are required – not lengthy team meetings.
Perfect solutions don’t exist

The risks inherent in updating core software mean that banks need the ability to identify, on a system-by-system basis, when the risks of change may outweigh the risks of attack. When there are no good choices, it’s vital to pick the least bad option.
AI attack requires AI defence

AI agents can launch autonomous and directed attacks, but the October 2026 exposure by AI tools of vulnerabilities in the PHP programming language shows that AI is vital for defence too. Most banks still make limited use of AI for cyber-defence, but this must become an important priority of future development.

By now, SIs have submitted their action plans to the ECB. Realistic and achievable plans which admit that instant updates are impossible, and that risk trade-offs are required, will be better received than utopian promises of perfection.

However, letters on a page change nothing. The challenge now is to follow through, and banks should consider taking the following actions:

Immediate: Assemble the teams, programmes and oversight required to manage and coordinate the implementation of action plans submitted to supervisors.
Medium-term: Establish the foundations for a rapid acceleration in system update processes - including the elimination of manual server managements, the creation of pre-defined processes, and the development of machine executable update capabilities.
Long-term: Evaluate current cyber security frameworks and identify vendors able to provide agentic “blue teams” of cyber defenders for vulnerability detection and patching.

Significant institutions should be in no doubt that the ECB will actively monitor progress against their defined action plans, as well as comparing them with peers. Using this pressure as leverage for a strategic upgrade in resilience will not only help supervisory dialogue; it will future proof banks against AI-enabled cyber-attacks.