The development requires firms and regulators to reassess whether existing defences at critical technology providers remain adequate. The BoE notes uncertainty over whether AI capabilities favour attackers or defenders.
However, the technology will likely necessitate more frequent software updates, which themselves introduce operational disruption risks.
Autonomous systems can identify vulnerabilities and execute exploits faster than human-operated attacks. The speed advantage compresses incident response windows for security teams. Detection systems built on traditional behaviour baselines may struggle to identify AI-generated attack patterns.
The report questions whether current resilience frameworks account for threats from systems that learn and adapt during operations. Financial institutions must defend against adversaries that can refine tactics in real time based on defensive responses.
Regulatory frameworks face adaptation pressure
The emergence of autonomous technologies has prompted calls for new regulatory structures from central bank leadership.
Sarah Breeden, BoE Deputy Governor, has signalled the need for AI-specific regulation to address risks from agentic systems.
“Our frameworks were not built to contemplate autonomous agents and relying on a human in the loop for all agent actions is unlikely to be realistic,” Sarah says.
The FPC questioned assumptions about AI’s economic benefits, noting uncertainty over productivity gains.
It remains unclear whether organisations can generate sustainable returns from AI applications.
However, the committee acknowledges that AI could support productivity growth across multiple sectors.
The technology has already contributed to economic expansion in some regions. The challenge for cybersecurity teams lies in securing systems whose business value remains unproven while threat actors actively exploit their vulnerabilities.
Source: Original Article
