By 
The International Monetary Fund (IMF) has warned that cyberattacks pose an increasing threat to global financial stability, cautioning that a major breach involving a bank, payment system or critical technology provider could disrupt essential services and transmit instability across financial markets.
The Fund said the growing digitalisation and interconnectedness of financial services have increased the potential for cyber incidents to trigger systemic disruption. It also identified artificial intelligence-driven market corrections and a sharper rise in government bond yields as major risks, warning that high borrowing levels, limited market liquidity and strong financial connections could amplify the effects of these shocks.
Cybersecurity emerges as a systemic financial risk
As financial institutions become more dependent on digital infrastructure and interconnected technology platforms, cyber incidents can have consequences that extend well beyond the organisation initially targeted.
The IMF cautioned that a major cyberattack could interrupt payment services, trading activities, access to bank deposits and other essential financial operations. An incident involving a systemically important bank, payment network, cloud provider or software platform could also spread disruption to other institutions that depend on the same infrastructure.
These connections increase the risk that an isolated technical failure or security breach could develop into a broader financial stability problem.
The threat is particularly significant where institutions share critical service providers or rely on common technology systems. A disruption affecting one of these providers could potentially impair multiple financial institutions at the same time, increasing the scale and complexity of the response required.
AI accelerates the cyber threat landscape
The IMF highlighted the growing speed at which cybercriminals can identify and exploit software vulnerabilities, leaving technology providers with less time to respond before attacks occur.
According to the Fund, in more than 70% of reported cases so far in 2026, software providers had almost no time to fix vulnerabilities before attackers exploited them. This represents more than double the proportion recorded in 2021, when providers typically had close to 300 days to address vulnerabilities.
The findings point to a shrinking window for vulnerability management and incident prevention as attackers become more capable of exploiting weaknesses in digital systems.
The Fund also warned that frontier artificial intelligence models could accelerate both cyberattacks and defensive capabilities. While AI may strengthen threat detection and security responses, it could also increase the speed and effectiveness with which malicious actors discover vulnerabilities and carry out attacks.
For financial institutions, these developments reinforce the importance of cyber resilience as part of broader operational risk management and regulatory compliance.
Interconnected markets could amplify financial shocks
Cyberattacks are among three major risks identified by the IMF, alongside an AI-driven market correction and a sharper increase in government bond yields.
The Fund warned that existing financial vulnerabilities could magnify the effects of these developments. High borrowing levels, limited liquidity and strong connections between financial markets may make it harder for institutions and governments to absorb sudden shocks.
A major cyber incident could therefore coincide with, or intensify, other sources of financial pressure. Disruptions to payments, trading or access to deposits could undermine confidence and affect market functioning, particularly if financial institutions are already operating under strained conditions.
The combination of technological and financial vulnerabilities makes cyber risk more than an information technology issue. It is also a concern for financial stability, given the potential for operational disruption to affect confidence, liquidity and the continuity of essential services.
IMF calls for stronger cyber resilience and oversight
The IMF urged policymakers to strengthen cyber defences alongside broader measures designed to protect financial stability. Its recommendations include improved incident reporting, resilience testing among financial institutions, stronger crisis preparedness and closer oversight of critical third-party service providers.
Better incident reporting can help authorities identify emerging threats and understand how disruptions may affect multiple institutions. Resilience testing and crisis preparedness can also help financial firms assess their ability to maintain essential operations during major incidents.
Oversight of external technology providers is another important consideration, particularly where banks and payment companies depend on shared cloud infrastructure, software platforms and other services that support critical financial functions.
The Fund’s warning underscores the importance of addressing vulnerabilities across the wider financial services ecosystem rather than focusing solely on individual institutions.
Public debt and inflation constrain crisis response
The IMF also cautioned that governments may have less capacity to respond to major economic and financial shocks because of high public debt, renewed inflationary pressures and rising borrowing costs.
These constraints could complicate efforts to contain the economic consequences of a serious cyber incident or other financial disruption, particularly if emergency support is needed when public finances are already under pressure.
The Fund advised emerging and developing economies to rebuild financial buffers while conditions remain relatively favourable. Strengthening these buffers could improve their capacity to absorb future shocks and reduce the risk that disruptions escalate into wider economic instability.
Proactive risk management is critical to financial stability
The IMF’s warning highlights the growing intersection between cybersecurity, artificial intelligence, third-party technology dependencies and financial stability. As digital financial services become more interconnected, weaknesses in one part of the system can potentially affect institutions and markets far beyond the initial point of failure.
For regulators and financial institutions, the challenge is to strengthen cyber resilience, improve coordination and address vulnerabilities before they develop into broader crises.
The Fund’s message is that effective financial stability measures must account for both traditional economic pressures and the evolving risks associated with increasingly digital financial infrastructure.
Comments