The rapid advance of frontier artificial intelligence is creating a potentially serious threat to the global financial system as increasingly capable models gain the ability to discover and exploit cybersecurity vulnerabilities at unprecedented speed and scale. Andrew Bailey, who leads the international body responsible for monitoring financial-system vulnerabilities while also serving as Britain’s central-bank governor, warned G20 finance ministers and central bankers that AI-assisted cyberattacks could simultaneously disrupt multiple financial institutions that rely on common technology providers and infrastructure. He urged banks and technology companies to strengthen vulnerability management and recovery capabilities, including maintaining the ability to rebuild critical systems from “bare metal” following a catastrophic attack. The warning reflects mounting concern that AI capabilities are advancing faster than governments, regulators, and financial institutions can establish adequate safeguards, potentially turning what once would have been isolated cyber incidents into broader threats to financial stability.
Key Takeaways
- Frontier AI could dramatically accelerate the discovery and exploitation of cybersecurity vulnerabilities, allowing attacks to unfold faster and across more targets than traditional defensive systems are designed to handle.
- Concentration among cloud, software, AI, and other technology providers creates systemic exposure because an attack against shared infrastructure could simultaneously affect numerous banks, financial institutions, payment systems, and markets.
- Financial regulators are increasingly emphasizing resilience rather than relying exclusively on prevention, including faster vulnerability patching, stronger incident-response systems, international coordination, and the ability to reconstruct critical financial infrastructure following a major attack.
In-Depth
Andrew Bailey’s warning places frontier artificial intelligence squarely within systemic financial risk rather than ordinary technology policy. As head of the global financial stability watchdog, Bailey told G20 finance ministers and central bankers that increasingly capable AI models could materially change the speed, scale, and economics of cyberattacks. Because banks, markets, payment systems, and other institutions depend heavily on shared technology infrastructure, an AI-assisted attack exploiting a common vulnerability could disrupt multiple firms at once.
The concern is not simply that artificial intelligence creates new offensive tools. Advanced models can accelerate vulnerability discovery and exploitation, compressing the time defenders have to patch systems and contain intrusions. That imbalance becomes especially consequential when financial institutions depend on a small number of cloud, software, and technology providers. A successful attack against shared infrastructure could therefore produce effects extending beyond a single company.
Bailey’s recommendation is fundamentally about resilience. Financial institutions and technology providers must strengthen vulnerability management, incident response, recovery planning, and their capacity to restore critical systems after catastrophic disruption. He specifically raised the possibility that firms may need to rebuild systems from “bare metal,” underscoring the severity of scenarios regulators are contemplating.
The warning also exposes a larger governance problem. Many countries still lack adequate protocols governing the development, release, and deployment of frontier models. With financial networks crossing national borders, weak safeguards in one jurisdiction can create consequences elsewhere. International coordination, rigorous model testing, stronger cyber defenses, and credible recovery capabilities are therefore becoming essential components of financial stability.