ESMA, alongside the EBA and EIOPA, has publicly backed a European Systemic Risk Board warning that the latest generation of advanced AI models could sharpen and speed up cyber-attacks against financial firms. The regulators note that while DORA and the AI Act already set a framework for operational resilience, the pace at which these tools can find and exploit software weaknesses raises fresh concerns, and they are urging supervised entities to upgrade their defences.
For retail forex and CFD traders, this lands squarely on operational risk. Your broker holds your funds, your positions, and your personal data on IT systems that are now a more attractive target. A platform outage during a volatile session, or a breach of client records, is no longer a remote worry.
The practical takeaway is to favour brokers that fall under EU supervision and the DORA resilience regime — the ESMA/CySEC/BaFin-authorised names our readers already lean towards — rather than lightly regulated offshore entities. Ask whether a broker segregates funds, maintains tested incident response, and reports ICT disruptions. Regulatory cover and cyber resilience are becoming inseparable parts of the same due-diligence question.