Emerging AI Technologies And Cyber Threats
According to CySEC, frontier AI models are becoming increasingly capable of identifying and exploiting software vulnerabilities, reducing the time between vulnerability discovery and potential attacks. The warning covers Cyprus Investment Firms, central securities depositories, trading venues, crypto-asset service providers, alternative investment fund managers, and UCITS management companies.
Digital Operational Resilience In Focus
Under the Digital Operational Resilience Act (DORA), regulated entities are required to maintain ICT risk management frameworks that address a changing cyber threat environment, including risks associated with emerging AI technologies. Firms were also urged to review existing controls and ensure that vulnerability management, patching procedures, and assessments of third-party ICT service providers are carried out effectively and on time.
Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram
Proactive Measures And Enhanced Monitoring
CySEC’s circular calls for stronger threat intelligence efforts and greater use of automation in security orchestration. Improved monitoring and detection systems would help institutions identify and respond to increasingly sophisticated cyberattacks more quickly. Maintaining resilient backup, restoration, and disaster recovery systems was highlighted as another priority, particularly during major cyber incidents.
Integrating AI Risks Into Governance
AI-related cyber risks should also be incorporated into ICT risk assessments, governance frameworks, and operational resilience plans, CySEC said. Such measures can help protect critical systems while supporting continuous improvements through post-incident reviews, updated threat intelligence, and testing.
Continued Oversight And Future Engagement
Looking ahead, CySEC said it will continue monitoring developments in frontier AI technologies and their implications for cybersecurity. The commission also plans to work with supervised entities to assess preparedness and ensure governance practices evolve alongside emerging risks.
