AI Reports · KPMG · 2026-11-03 · Blog / commentary
ECB raises the bar on AI-enabled cyber resilience
The ECB has written to significant institutions asking for action plans, due 31 October 2026, to withstand AI-enabled cyber-attacks. The plans should cover six areas, including attack surface protection, patch management at scale and AI-enabled defence, and joint supervisory teams will monitor implementation from November. The article argues that AI accelerates existing cyber risks, since attackers can exploit a weakness almost as soon as a vendor issues a patch.