AI-Powered Security Findings Overwhelm Financial Firms, Says FCA

Financial services firms are struggling to keep up with AI-powered security findings, according to a warning from the Financial Conduct Authority (FCA). The FCA has advised firms to have enough specialist engineers on hand to validate and remediate vulnerabilities detected by AI tools. This is because the rapid detection of security flaws by AI systems can create bottlenecks for companies.

The FCA's review of how firms use AI to improve cyber-security found that it's not just a matter of identifying vulnerabilities, but also assessing and responding to a continuous flow of findings. This could put pressure on remediation teams, engineering resources, and change-management processes, the regulator warned.

In a letter to G20 finance ministers and central bank governors, Bank of England governor Andrew Bailey echoed these concerns. He wrote that frontier AI models have the ability to 'materially alter the speed, scale and economics of cyber risk', which could undermine confidence in markets.