AI cyber threats could expose capital markets' weakest links

Artificial intelligence will accelerate cyber attacks against financial market infrastructure, the UK’s NCSC has warned.

It comes as exchanges, clearing houses and settlement networks race to strengthen operational resilience against increasingly automated cyber threats.

Richard Horne, CEO at the NCSC, said organisations must improve resilience before AI-powered attacks begin exploiting vulnerabilities at machine speed.

"The cyber challenge for the next decade is ensuring organisations are adequately prepared and can adapt quickly enough to defend themselves against AI-powered attacks," he said.

The warning forms part of the NCSC's annual review, which argues that AI is unlikely to create entirely new cyber threats but will significantly increase the speed, scale and efficiency of existing attack methods.

For capital markets firms, that raises concerns around vulnerability discovery, software supply chains and operational resilience. The report warns that AI is making it easier to identify weaknesses in large codebases and exploit them before organisations can deploy patches.

That challenge is particularly significant for operators of critical financial infrastructure including London Stock Exchange Group, Nasdaq, CME Group, DTCC, Euroclear, Clearstream and CLS, whose systems process trillions of dollars of securities, derivatives and payments activity each day.

The review argues that organisations with modern technology estates and strong cyber governance will increasingly pull ahead of peers, while firms carrying significant technical debt risk becoming more attractive targets.

The warning aligns with a broader regulatory push. UK regulators, European authorities through DORA, and US agencies have all prioritised cyber resilience as a financial stability issue rather than simply a technology risk.

Perhaps most significant for market infrastructure providers is the NCSC's conclusion that AI's biggest impact will be the industrialisation of existing attacks. For exchanges and post-trade operators, the threat is less a Hollywood-style autonomous attack and more relentless exploitation of known weaknesses at a scale that could test the resilience of critical market infrastructure.

The real story for your readership: this is not about hackers becoming smarter. It is about attackers becoming faster than defenders, which is precisely the risk that keeps CEOs at London Stock Exchange Group, Nasdaq, CME Group, DTCC, Euroclear, Clearstream and CLS awake at night.