The Mythos Moment

On 7 July the ECB required significant institutions under the Single Supervisory Mechanism to submit plans against AI-enabled cyber threats by 31 October. The European Commission published its Action Plan on Cybersecurity and Artificial Intelligence the same day. Advanced models are increasingly capable of identifying vulnerabilities, generating exploit code and supporting defensive work. This roundtable examines what preparedness now requires: what institutions should address first, how legacy systems should be managed, how access to advanced defensive capabilities should work, and what skills and controls security teams need as these tools are deployed in production systems. The deadline applies to significant institutions under ECB supervision. Energy, telecommunications, health and transport face comparable questions under their own cyber obligations, including NIS2.