European Commission launches AI cybersecurity action plan

The European Commission unveiled an Action Plan to address the risks and opportunities of advanced artificial‑intelligence (AI) models for cybersecurity. The plan builds on the EU’s AI Act and other digital‑security legislation, linking three pillars: safe and responsible use of advanced AI, strengthening the Union’s overall cyber‑resilience, and expanding European AI capabilities for defence. A dedicated evaluation capacity for AI models will be established, targeted to be operational by 2027, to support the European AI Office and third‑party assessments. The Commission will work with the EU Agency for Cybersecurity (ENISA) to create a “blueprint” for secure access to advanced AI systems and a secure testing platform for organisations in critical sectors such as energy, transport, health, finance and public administration. The initiative also includes a Grand Challenge to spur AI‑powered security tools and investments in AI factories and gigafactories. Commission executive vice‑president Henna Virkkunen said, “AI is transforming the meaning of cybersecurity, and we must keep pace.” The plan aims to turn existing legal frameworks into practical tools that protect infrastructure while reducing dependence on non‑EU technologies.