The European Central Bank is expected to warn banks about risks tied to Claude Mythos Preview, an Anthropic model that the company says can identify and exploit zero-day vulnerabilities across widely used operating systems and web browsers.

The central bank also plans to ask banks in the US with access to the model to share insights with European peers.

ECB supervisory board member Frank Elderson said banks should deploy patches faster because AI can find vulnerabilities within minutes of a fix being released.

The move builds on the ECB’s 2024 stress test on cyber resilience and comes as Digital Operational Resilience Act (DORA) rules, in force since January 2025, set common requirements for information and communications technology risk management, resilience testing, incident reporting, and cyber-threat information sharing.

Related DORA standards also require weekly scanning and patch management for critical information and communications technology assets.

Separately, talks between Mistral and European banks on a cybersecurity model designed to identify vulnerabilities suggest local providers are also pursuing the market.

🔗 Source: Bloomberg

Recent European Central Bank developments