Britain's bank regulator expects 'quite significant disruption' from latest AI models

• PRA Chief Executive Sam Woods highlighted that AI models' growing capability to detect vulnerabilities will require banks to patch systems at unprecedented speed, potentially increasing operational risks
• Banks will need to enhance basic cyber hygiene practices and adopt AI-driven defenses to respond faster to emerging threats
• Anthropic released its Mythos AI model to limited businesses in April, with cybersecurity experts noting it poses particular challenges to banking's legacy technology systems

Summary: UK Bank Regulator Warns of AI-Driven Disruption to Financial Services

Sam Woods, CEO of the Bank of England's Prudential Regulation Authority (PRA), warned on May 11 that financial services should expect "quite significant disruption" from advanced AI models, specifically citing Anthropic's Mythos and ChatGPT 5.5 Instant.

Key Concerns

Woods highlighted these models' enhanced capability to identify system vulnerabilities in banking infrastructure. The primary risk stems from the need for banks to rapidly patch these vulnerabilities, which he identified as "the main driver of outages" in the financial system. The combination of AI-discovered vulnerabilities and the pressure for immediate remediation could create operational challenges for financial institutions.

Regulatory Response

The PRA chief emphasized that banks must enhance fundamental cybersecurity practices and accelerate response times. He stressed that AI-driven defense systems will become increasingly critical for financial institutions to counter AI-powered threat detection.

Woods delivered these remarks at UK Finance's Growth Delivery Summit.

AI Model Details

Anthropic deployed its Mythos AI model to a limited group of businesses in April. Cybersecurity experts view Mythos as particularly challenging for the banking sector due to legacy technology systems prevalent across the industry.

Market Context

Despite these concerns, a Bank of England co-led cyber group concluded last month that adequate preparations exist to address these challenges, suggesting the disruption may be manageable with proper safeguards.

The warning underscores growing regulatory attention to AI's dual-edge impact on financial services—both as a potential vulnerability source and a necessary defense mechanism.