Bank of England Warns AI Is Outpacing Banks’ Cyber Fixes

Financial firms depend on tightly connected payment, trading and third-party technology systems, allowing a single software weakness to become a broader stability threat. The Bank of England’s Financial Policy Committee said frontier AI can accelerate vulnerability discovery and exploitation, while remediation still requires firms to validate findings, assess their importance, map affected systems, test fixes and deploy them safely. That imbalance could give attackers an advantage and leave institutions facing an expanding backlog of known flaws.

In its Financial Stability Report published on July 7, 2026, the Bank warned that a mounting patch backlog could disrupt payments, trading, clearing and settlement across several firms or shared suppliers. Its first-half 2026 Systemic Risk Survey found 82% of respondents ranked cyberattacks among the five biggest risks to Britain’s financial system, while 26% called cyber risk the single largest threat. The Bank urged firms to follow the joint May 2026 guidance issued with the Financial Conduct Authority and HM Treasury, including faster patching and stronger recovery plans.