The Australian Securities and Investments Commission (ASIC) has issued an urgent call for financial firms to strengthen their cybersecurity defenses as frontier AI tools dramatically accelerate cyber threats. In an open letter, the regulator warned that sophisticated models like Claude Mythos can exploit vulnerabilities at unprecedented speed, pushing cyber risk into a “new era.”
ASIC Commissioner Simone Constant stressed that organizations must act now rather than wait for AI-driven threats to evolve, emphasizing that basic cyber safety principles remain unchanged. She urged top management to own responsibility, conduct rigorous testing, and remediate gaps before breaches occur. “The clock is at a minute to midnight – if you aren’t on top of your cyber resilience already, the time to act and prepare is right now,” Constant said.
The warning follows evidence from mortgage aggregator Connective that brokers are adopting AI without adequate defensive frameworks. Connective CEO Glenn Lees noted the industry’s AI excitement but highlighted the lack of secure deployment structures. Meanwhile, the Australian Prudential Regulation Authority (APRA) separately cautioned banks that governance and control measures for AI are lagging behind its rapid expansion.
ASIC’s crackdown on FIIG Securities Limited illustrates the consequences of failing to meet cybersecurity obligations. The fixed-income specialist was fined $2.5 million and ordered to pay $500,000 in costs after a 2023 cyber breach exposed sensitive data of about 18,000 clients. ASIC noted that the firm’s security weaknesses magnified the breach’s impact, and the Federal Court mandated an independent cybersecurity audit.
In a parallel development, a new World Economic Forum (WEF) report produced with KPMG reveals that artificial intelligence is fundamentally reshaping cybersecurity in a positive way. Drawing on 20 case studies and input from 84 organizations, the report found that 94% of cybersecurity executives view AI as the dominant force in the field, and 77% have already integrated it. Extensive AI use reduces average breach costs by up to $1.9 million and cuts response times by roughly 80 days. Real-world examples include KPMG achieving a 25% efficiency boost in threat intelligence, Accenture slashing asset analysis from 15 minutes to under one minute, and IBM’s ATOM platform automating hundreds of analyst hours monthly.
The WEF report underscores that AI’s value lies in augmenting human expertise, not replacing it, and calls for strong governance, skills investment, and oversight. With the rise of agentic AI—autonomous systems capable of complex actions—the initiative urges secure, scalable adoption to build a “secure agentic economy.” Other research from Deloitte, FinRegLab, and the IMF highlights similar potential in financial services, including real-time fraud detection and compliance, though governance often lags behind deployment.
