BIS Report: AI Shortens Banks' Patching Window to Minutes

• •AI reduces banks' vulnerability patching time from weeks to minutes.
• •Urgent fixes outside normal maintenance are recommended by BIS.
• •Senior management involvement is crucial for effective cyber response.

A recent paper from the Bank for International Settlements (BIS) reveals that advanced AI technologies have drastically reduced the time banks have to address software vulnerabilities from weeks to mere minutes. The report emphasizes the need for financial institutions to expedite their security decisions and patching processes to mitigate risks. It highlights that AI can identify software flaws and convert them into actionable attacks, posing a significant threat to banks. The BIS calls for urgent fixes outside of normal maintenance schedules, as traditional security reviews may leave firms vulnerable. The U.K. Financial Conduct Authority has noted that firms are struggling to keep pace with the rapid discovery of vulnerabilities. The paper also references a July incident involving AI agents that demonstrated how quickly vulnerabilities can be exploited. U.S. regulators have echoed these concerns, urging financial firms to enhance their cyber response capabilities. The BIS report stresses that cyber response should involve senior management to ensure timely decision-making.