The global financial system is at risk as frontier AI models transform the cyber-threat environment, the Financial Stability Board (FSB) has warned.
Chaired by the Bank of England governor, Andrew Bailey, the FSB is an advisory body that monitors for potential risks to global markets.
In a letter to G20 finance ministers and central bank governors dated August 28, Bailey warned that AI is complicating a risk landscape already shocked by conflict in the Middle East and its impact on inflation.
“Frontier AI may have the ability materially to alter the speed, scale and economics of cyber risk, which could undermine market confidence system-wide, especially due to highly concentrated third-party service providers,” he noted.
Bailey urged financial services firms and authorities to prepare for a new threat environment characterized by more vulnerabilities, faster patching, and potentially new “operational and resilience challenges” if change, testing and recovery processes aren’t able to adapt.
“Frontier AI offers significant opportunities to strengthen cyber defense; but recent developments highlight the importance of ensuring that advances in capability are matched by resilience and preparedness,” he added.
Read more on frontier AI: NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense.
The FSB urged the sector and its tech providers to strengthen “vulnerability management, response and recovery capabilities,” and prepare for the possibility of disruption across multiple firms or shared tech dependencies.
“These developments reinforce the importance of robust response and recovery capabilities, including the ability to restore critical systems and data from ‘bare metal’ following a significant cyber incident, as well as the importance of resilience amongst critical third-party technology providers and other common service providers, on which the financial system depends,” the letter continued.
The Latest Warning
These warnings are not new. In May, the UK's Financial Conduct Authority (FCA), the BoE and the Treasury released guidance urging the sector to deploy “effective protective, detective, threat containment and cyber-response capabilities” in order to mitigate cyber risks stemming from AI.
A month later, leaders of the Five Eyes cybersecurity agencies warned in a rare missive that frontier AI will “fundamentally” transform offensive and defensive capabilities within months.
GCHQ director, Anne Keast-Butler, used the occasion of the agency's first annual lecture at Bletchley Park in May to warn about the impact of frontier AI.
Their pronouncements follow several incidents reported by model makers themselves, which have led to AI agents breaking free of testing environments to hack third-party organizations.
OpenAI claimed described a now-infamous incident involving Hugging Face as a “warning shot” to itself and the world.