The European Commission has presented a new Action Plan on Cybersecurity and Artificial Intelligence aimed at preparing Europe for the new challenges posed by advanced AI models. These technologies offer great opportunities to strengthen digital defence, but they can also be used by malicious actors to automate attacks, detect vulnerabilities, or increase the speed and sophistication of cyber incidents.
The plan aims to coordinate the efforts of member states, industry, and European bodies to ensure that AI is developed and used safely, reinforcing the protection of digital infrastructures and essential services.
Artificial intelligence is transforming the world of cybersecurity. On one hand, it allows for the identification of vulnerabilities, analysis of large volumes of data, detection of anomalous behaviours, and a quicker response to an attack. On the other hand, cybercriminals can also leverage these same capabilities to automate attack campaigns, create more sophisticated malware, or refine phishing and social engineering techniques.
Aware of this scenario, the European Commission is committed to a strategy that combines regulation, innovation, and cooperation to reduce the risks associated with the most advanced AI systems.
One of the main measures consists of reinforcing the evaluation of advanced models before their implementation in the European market. According to the European Artificial Intelligence Act, these systems must undergo risk assessment processes and corresponding mitigation measures.
To support this task, the Commission will create a specific European cybersecurity assessment capability, which is expected to be operational by 2027. This infrastructure will provide independent technical knowledge about the capabilities and risks of the most advanced AI models.
The plan also aims to facilitate access for both public administrations and European companies to the most advanced artificial intelligence systems with guarantees of security and transparency.
To achieve this, the Commission will work closely with the European Union Agency for Cybersecurity (ENISA) to define a European model for structured access to these technologies, promoting responsible use in the field of cybersecurity.
Another notable initiative is the creation of a secure testing platform developed by ENISA and the European Commission’s Joint Research Centre. This
platform will allow experimentation with AI-based tools in simulated environments, reducing risks before deploying them in real environments.
Critical sectors—such as finance, energy, healthcare, transportation, or public administrations—will be able to validate new technologies and gain experience in the safe use of artificial intelligence.
The plan also recognises the importance of open-source software within the European ecosystem. ENISA will promote initiatives to foster collaboration between administrations, businesses, and developer communities, developing best-practice guidelines and promoting campaigns to strengthen the security of the most critical open-source projects.
The Action Plan also has a clear strategic dimension. The Commission will launch the «EU Grand Challenge on AI for Cybersecurity», an initiative aimed at stimulating innovation through collaboration between businesses, research centres, and institutions.
At the same time, Europe will continue to invest in its own artificial intelligence infrastructures, such as AI factories and future gigafactories, as well as in financial instruments that will enhance European technological capacity and reduce dependence on technologies developed outside the Union.
This new Action Plan complements the existing European regulatory framework. The Artificial Intelligence Act establishes specific obligations for advanced models; the Cyber Resilience Act will require digital products to incorporate security by design; the NIS2 Directive strengthens the protection of essential sectors, and the DORA Act enhances the digital resilience of the financial sector.
Together, these initiatives shape a European strategy aimed at ensuring that innovation in artificial intelligence is accompanied by high levels of security and trust.
Artificial intelligence will shape the future of cybersecurity. It can become one of the best tools for detecting threats, automating defence, and protecting critical infrastructure, but it also offers new opportunities to attackers.
With this Action Plan, the European Union is committed to anticipating risks, promoting responsible innovation, and strengthening its technological autonomy. For businesses, administrations, and security professionals, the message is clear: integrating AI into cybersecurity strategies is no longer a future option, but a necessity to face an increasingly complex threat landscape.
_____
Aquest apunt en català / Esta entrada en español / Post en français