Enforcement action · European Securities and Markets Authority

[ESMA] The ESAs support ESRB warning on systemic cyber risks from frontier AI models

[ESMA] The ESAs support ESRB warning on systemic cyber risks from frontier AI models is an AI-related enforcement action involving European Securities and Markets Authority. The European Supervisory Authorities (ESAs) endorse ESRB's warning on systemic cyber risks from frontier AI models, urging financial entities to enhance cybersecurity measures in line with DORA.

Action details

Agency
European Securities and Markets Authority
Jurisdiction
EU
Document type
press release
Effective
2026-07-07
AI risk category
high
Topic
ai safety

Summary

The European Supervisory Authorities (EBA, EIOPA, ESMA) support the European Systemic Risk Board's (ESRB) warning about systemic cyber risks posed by frontier AI models. They highlight that while existing EU frameworks like DORA and the AI Act provide a foundation, the speed and scale of AI-enabled cyber-attacks necessitate strengthened cybersecurity measures. Financial entities are urged to adapt their capabilities, and competent authorities are invited to reflect these developments in supervisory activities. This action reinforces existing DORA obligations for financial entities.

Primary source

https://www.esma.europa.eu/press-news/esma-news/esas-support-esrb-warning-systemic-cyber-risks-frontier-ai-models →

Frequently asked questions

What is [ESMA] The ESAs support ESRB warning on systemic cyber risks from frontier AI models?
The European Supervisory Authorities (EBA, EIOPA, ESMA) support the European Systemic Risk Board's (ESRB) warning about systemic cyber risks posed by frontier AI models. They highlight that while existing EU frameworks like DORA and the AI Act provide a foundation, the speed and scale of AI-enabled cyber-attacks necessitate strengthened cybersecurity measures. Financial entities are urged to adapt their capabilities, and competent authorities are invited to reflect these developments in supervisory activities. This action reinforces existing DORA obligations for financial entities. Primary source →
Which agency brought the action?
European Securities and Markets Authority brought this enforcement action in EU. Primary source →
What was the penalty?
No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty. Primary source →
When did the action take effect?
The action was effective 2026-07-07. Primary source →
Where can I find the primary source?
The primary source for [ESMA] The ESAs support ESRB warning on systemic cyber risks from frontier AI models is at https://www.esma.europa.eu/press-news/esma-news/esas-support-esrb-warning-systemic-cyber-risks-frontier-ai-models. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Stay informed

Get every European Securities and Markets Authority AI enforcement update.

Start 14-day trial →