The International Monetary Fund has published analysis arguing that artificial intelligence is materially changing cyber risk in finance by allowing attackers to find and exploit vulnerabilities faster and at lower cost, increasing the risk of correlated failures across shared software, cloud services, payment systems and data networks. It says severe cyber incidents could trigger funding strains, raise solvency concerns and disrupt broader markets, turning AI enabled cyber risk into a potential macro financial shock rather than only a technical or operational issue. The analysis points to Anthropic's controlled release of Claude Mythos Preview as evidence of how quickly offensive capabilities are advancing, noting that the model could find and exploit vulnerabilities across major operating systems and web browsers even for non experts. It also notes OpenAI's restricted cyber version of GPT-5.5 is designed to strengthen defenders under tighter governance. While advanced offensive AI cyber tools are not yet widely available and some closed, industry specific financial software is harder to target, the IMF says those buffers are likely to erode as capabilities spread. At the same time, AI can improve defense through threat detection, fraud prevention, vulnerability identification, incident response and more secure software development, provided institutions invest in governance, integration, human oversight, business continuity, disaster recovery and cyber hygiene. On policy, the IMF says authorities should treat cybersecurity as a core financial stability issue and expand existing measures for a world of faster, automated attacks. It highlights robust resilience standards, supervision focused on systemic transmission channels, response and recovery planning, cyber stress testing, scenario analysis, board level oversight, public private threat intelligence sharing and stronger international coordination and capacity development, particularly for emerging and developing economies.
International Monetary Fund 2026-05-07
International Monetary Fund analysis warns AI enabled cyber risk could destabilize the financial system and calls for resilience first supervision
The International Monetary Fund warns that artificial intelligence is amplifying cyber risk in finance by enabling faster, cheaper exploitation of vulnerabilities and increasing the likelihood of correlated failures across shared infrastructures, with potential macro financial shocks. While AI can also strengthen defence, benefits depend on strong governance and cyber hygiene. The IMF urges authorities to treat cybersecurity as a core financial stability issue and enhance resilience standards, supervision, response and recovery planning, cyber stress testing, board oversight, threat intelligence sharing and international coordination, particularly for emerging and developing economies.