IMF Highlights AI-Driven Cyber Risks as a Financial Stability Issue

Artificial intelligence is reshaping the cybersecurity landscape. The International Monetary Fund (IMF) is now warning that these developments could have consequences extending far beyond individual companies and banks. According to the IMF, AI-driven cyberattacks could evolve into a threat to global financial stability.

In a recent analysis, the IMF highlights how artificial intelligence enables more sophisticated cyberattacks to be carried out faster, at lower cost, and on a much larger scale than ever before. At the same time, the financial sector is becoming increasingly dependent on shared digital infrastructure, meaning that a single vulnerability could affect multiple organisations simultaneously.

“Cyber risk is no longer just an issue for the IT department. It is a strategic issue for executive management and boards, and ultimately a matter of societal resilience,” says Pernilla Rönn, Head of Cybersecurity at HiQ.

AI Increases the Risk of Systemic Cyberattacks

The IMF argues that AI lowers the barrier to sophisticated cyberattacks by automating the process of identifying and exploiting vulnerabilities. As a result, a wider range of threat actors can carry out attacks that previously required highly specialised technical expertise.

The IMF also warns that the financial sector’s reliance on shared platforms, cloud services and payment infrastructure increases the risk of so-called correlated attacks, where multiple organisations are affected at the same time.

The consequences could be far-reaching. Disruptions to payment systems, credit markets and other critical functions may lead to liquidity stress, loss of confidence and, in the worst-case scenario, threaten financial stability.

Resilience Becomes Critical in a Digital Society

Sweden is one of the world’s most digitalised societies. BankID, Swish and digital payments have become an integral part of everyday life for both individuals and businesses.

While this creates significant opportunities, it also increases dependence on reliable digital infrastructure.

“Much of our financial ecosystem is built on shared platforms and services. If a critical component is compromised, the consequences can spread rapidly across organisations and sectors,” says Pernilla Rönn.

Defences Must Evolve as Quickly as the Threats

AI is not only being used by attackers. The technology is also becoming an increasingly important tool for detecting intrusions, identifying anomalies and automating security operations.

However, the IMF stresses that investing in new technology alone is not enough. Organisations must also strengthen their resilience through robust governance, business continuity planning, incident management and regular stress testing.

The IMF calls for a stronger focus on resilience — the ability to withstand, respond to and recover from attacks when they occur, rather than focusing solely on prevention.

Cybersecurity as a Boardroom Issue

For businesses and organisations, these developments mean that cybersecurity must become an integral part of business strategy.

“The security of the future will not be determined solely by the technology organisations use, but by how quickly they can adapt to a threat landscape that changes in real time. Leadership teams need to view cybersecurity as a business-critical issue and invest in resilience, not just in new digital capabilities,” says Pernilla Rönn.

The IMF’s message is clear: as AI amplifies cyber threats, cybersecurity must be treated as an issue of financial stability, critical societal functions and long-term resilience — not merely as a technical IT concern.