MAS and ABS Launch AI Cyber Risk Taskforce as Frontier AI Threats Escalate

Singapore's financial regulators are confronting a hard truth: the same frontier AI models powering banking innovation are also giving adversaries a formidable new toolkit. As large language models make it easier to discover vulnerabilities and automate attacks at scale, the Monetary Authority of Singapore (MAS) and the Association of Banks in Singapore (ABS) have decided that coordination, not individual preparedness, is the only viable defence.

The two bodies have jointly established the AI-Driven Cyber and Technology Risk Taskforce, known as ACT, bringing together regulators, Singapore's three major banks — DBS, OCBC, and UOB — alongside the Singapore Exchange (SGX), payment infrastructure operator NETS, and Banking Computer Services (BCS). The multidisciplinary taskforce has been operating since May 2026, pulling together leaders in cybersecurity, technology resilience, and artificial intelligence to address what MAS describes as the "severity, scale and sophistication" of AI-enabled cyber threats.

The taskforce's mandate goes beyond information sharing. ACT will conduct proof-of-concept trials to test and validate advanced AI-enabled defensive tools against evolving attack patterns, and develop guidance on measures, controls, and solutions that financial institutions across Singapore can adopt. This is a meaningful escalation from Singapore's existing approach — moving from individual bank-level security investments to a sector-wide collective defence framework that acknowledges a breach at any institution weakens the entire ecosystem.

MAS Assistant Managing Director for Technology Vincent Loy framed the urgency starkly: "Frontier AI is increasing the severity, scale and sophistication of cyber threats. The financial sector must respond with urgency and through strong collaboration." ABS Director Ong-Ang Ai Boon reinforced the commitment to "close coordination, strong governance and ongoing partnership." The taskforce's formation comes against a backdrop of surging AI investment in Singapore's financial sector — the same institutions now collaborating on defence are also racing to deploy AI across customer profiling, fraud detection, and automated back-office operations, creating a significantly expanded attack surface.

Why it matters for Singapore: Singapore's position as a global financial hub makes it a high-value target for AI-powered cyberattacks. The ACT taskforce represents an important structural response — moving beyond reactive incident response to proactive, coordinated defence architecture. With the financial sector contributing roughly 14% of Singapore's GDP, the resilience of this system isn't just a regulatory concern; it's an economic imperative. The proof-of-concept trials, if successful, could produce a blueprint for AI-era financial sector defence that other jurisdictions adopt.