ECB to Mandate AI Defense Upgrades for European Banks

The European Central Bank plans to send a 'dear CEO letter' to lenders across the region, signaling a shift toward mandatory oversight of AI-related risks. Elderson emphasized that these threats extend beyond standard IT concerns, requiring long-term strategic investment and direct management supervision to secure critical infrastructure, including cloud services and payment networks.

While the sector currently benefits from high profitability, the financial burden of these upgrades may disproportionately affect smaller institutions. Elderson warned that scenarios previously dismissed as unlikely tail risks are gaining probability as attackers increasingly combine minor security flaws into major systemic breaches. The ECB intends to follow up this broad directive with targeted, bank-specific reviews to ensure that lenders possess the necessary resources to withstand a new generation of digital threats.