Canadian Banking Watchdog Issues AI Cybersecurity Warning
Synopsis
The regulator has cautioned financial institutions that advanced AI models could increase cyber risks and compress the window for detecting and responding to attacks.
Canada's banking watchdog is flagging serious cybersecurity risks to banks, citing sophisticated AI models that can quickly discover and exploit software vulnerabilities.
The warning came in an April 29 email from the Office of the Superintendent of Financial Institutions (OSFI) to the chief information officers and cyber security and risk officers at federally regulated banks and insurers.
In an access-to-information release of the communication, the watchdog pointed to the existence of models like Anthropic's Claude Mythos as evidence of how evolving AI systems could shrink the timeline for finding, analyzing, and fixing security flaws that are then exploited.
Regulator expands guidance as AI adoption grows
After the release of the email warning, OSFI released a public bulletin on generative and agentic AI. OSFI's approach to AI is risk-management focused and technology-agnostic, and doesn’t target a specific AI model.
OSFI recommends that financial institutions ensure they maintain appropriate governance, control and supervisory standards, which are commensurate with the increasing adoption and integration of AI into financial sector operations.
The warning to institutions follows rising AI usage by Canadian banks to help with software development, fraud detection and customer service, among other tasks. It’s unclear yet if any Canadian financial institution has been given access to Anthropic’s closed Project Glasswing system where Claude Mythos is housed.
Global regulators increase scrutiny
Canada is part of a global chorus of regulators that are increasingly focused on AI cyber risks. The European Central Bank (ECB) recently asked its euro area banks to create plans for how they will react to AI-driven cyber threats, and the Bank of England has identified AI as an emerging risk in the financial system.
The average cost of a data breach globally increased to US$4.88 million in IBM's Cost of a Data Breach Report 2025, reminding the industry of the importance of cyber resilience.
Member banks continue to invest in cybersecurity and meet OSFI’s requirements in cyber risk management and reporting, according to the Canadian Bankers Association.
Source: Reuters
Pooja Malik is a business journalist with over six years of experience covering startups, entrepreneurship, and emerging trends. She has previously worked with leading media platforms such as YourStory Media and BW BusinessWorld, where she reported on business, policy, and market developments. Currently, she serves as Editor at The Inspirepreneur Magazine, where she writes and edits stories across business, lifestyle, and travel, with a focus on clarity, accuracy, and reader relevance.
You Might Also Like
Australia’s Tourism Industry: Economic Impact and Future Prospects
Eleven People Die in Kenya Plane Crash During Safari Trip
