Warren presses Treasury on financial sector cyber defenses amid AI attack risks
Rising concern over AI-driven threats is pushing cybersecurity back to the center of U.S. financial oversight debates. Senator Elizabeth Warren is urging Treasury Secretary Scott Bessent to toughen protections for banks and other financial institutions after citing 2025 data showing the sector suffered the most data breaches of any industry for a second straight year.
Highlights
- Warren urges the Treasury to strengthen financial sector cybersecurity as advanced AI models like Anthropic's Claude Mythos raise system vulnerability risks.
- She criticizes the administration's deregulatory approach and CISA's 2025 dismantlement, which cut federal cyber workforce nearly one-third amid intensifying threats.
- Her letter calls for stronger supervision, vendor oversight, and improved threat-sharing, with requested responses by June 16, 2026 affecting potential regulatory actions for banks.
Letter urges tighter oversight measures
As reported by the Senate Committee on Banking, Housing, and Urban Affairs, Warren sent a letter to Bessent urging the Trump administration to strengthen the financial sector's cybersecurity resilience as more advanced AI tools increase the risk of malicious cyber activity.Warren says newer AI models, including Anthropic's Claude Mythos, could make it easier for attackers to identify and exploit software vulnerabilities, exposing sensitive financial data and raising the risk of broader destabilizing attacks on the financial system. In the letter, she calls on the administration to reverse what she describes as a deregulatory cybersecurity agenda and to adopt stronger rules for bank supervision, vulnerability identification and remediation, third-party vendor oversight, and threat information sharing.
She also asks for responses by June 16, 2026, saying the information will help inform her legislative oversight of the banking system.
Pressure grows over federal cyber capacity
Warren argues that the administration is weakening cybersecurity resources across sectors at a time when threats are intensifying. She points to government staffing cuts and says the administration dismantled the Cybersecurity and Infrastructure Security Agency in 2025, reducing its workforce by nearly one-third.The push adds to a broader policy debate over whether financial regulators and the Treasury Department should impose tougher cyber risk controls as AI tools become more capable. For banks and other financial firms, that could mean closer scrutiny of internal controls, external vendors, and information-sharing practices tied to operational resilience.
Our earlier article on U.S. bank regulators’ push to soften post-crisis oversight outlined how the Fed, FDIC, and OCC have argued for more tailored supervision and greater room for innovation in areas like AI and blockchain. It also emphasized that, even as a deregulatory agenda advances, officials have warned that newer AI tools can expose fresh vulnerabilities, keeping cyber and operational risk management high on the supervisory agenda.
- Forex
- Crypto