🔍 Read the full analysis: From The Fed’s Risk Survey To Australia’s AI Stress Test Plan on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
In its November 13 Financial Stability Report, the Federal Reserve said 87% of 23 market contacts surveyed in September and October named AI as a risk to U.S. financial stability. Australia’s APRA separately said frontier AI could accelerate cyber threats and that its 2027 system-wide stress test will examine AI-driven disruption; both regulators also point to risks from reliance on shared providers.
The Federal Reserve’s latest Financial Stability Report says 87% of surveyed market contacts identified artificial intelligence as a risk to U.S. financial stability, while Australian prudential regulator APRA has said its 2027 system-wide stress test will examine AI-driven disruption. The two developments put attention on potential cyber threats, financing tied to AI infrastructure and institutions’ reliance on common technology providers.
The New York Fed collected responses from 23 market contacts in September and October, including professionals at banks, broker-dealers, investment funds and advisory firms. The share naming AI rose from 50% among 20 contacts in the spring survey. The Fed says these figures represent respondents’ views, not the views of the Federal Reserve Board or the New York Fed. Its report reflects information available through October 28.
Contacts described several distinct AI-related concerns: a correction in AI-linked stocks if large investments fail to produce expected returns; cyberattacks made more capable or easier to carry out with AI; and complex financing connected to the AI buildout. The Fed’s report also says debt issuance tied to advanced computing exceeded $680 billion by October 2026, or about 31% of investment-grade nonfinancial corporate issuance, compared with less than 6% in 2023.
APRA’s System Risk Outlook, issued November 12, says frontier models, including those from Anthropic and OpenAI, are improving at finding and exploiting software vulnerabilities. APRA says its 2027 System Stress Test will examine disruption driven by AI. The source material also reports that APRA found few institutions had tested how to move away from critical AI providers, though it does not give a count or describe the institutions.
Explained in motion
Banks, insurers and funds often rely on the same few models, platforms and service providers. Supervisors warn that one problem there can reach all of them at once.
Illustrative sequence, not a real incident
Shared providerMany institutions run on the same model, platform or service provider.
One changeA failure, a compromise or a model update changes how that provider’s AI works.
Many hit at onceEvery institution that depends on it is affected at the same time.
Services stallPayments, claims or trading slow down. The Fed warns that disruptions can hurt market liquidity and confidence.
No quick switchThe damage grows when there is no ready substitute for the service.
Source: APRA, System Risk Outlook (November 12, 2026) and letter to industry on AI (April 30, 2026); Federal Reserve, Financial Stability Report (November 2026), pp. 47–48. Illustrative sequence built from the mechanisms they describe.
Graphic: Powered by Thorsten Meyer AI
AI Risk Spans Markets and Operations
The Fed findings bring together risks that could affect financial firms through different channels. A repricing of AI-related investments could expose lenders and investors to losses, while cyber incidents could disrupt financial institutions or the services they depend on. The report says the largest U.S. bank holding companies have close to $1 trillion in exposure to firms and vehicles behind the advanced-computing buildout; that figure describes exposure, not losses or a forecast of failure.
Reliance on a small number of technology providers creates a separate operational concern. The Fed warns that an attack on a critical third-party service provider could affect multiple institutions, particularly where alternatives are limited. APRA’s finding that few institutions had tested a switch away from critical AI providers points to a practical question for supervisors: whether firms can keep operating if a widely used service becomes unavailable or unsafe.
The developments are relevant beyond banks. Insurers, companies using AI vendors and customers could also face service interruptions or indirect effects from cyber incidents and market repricing. Neither regulator’s material establishes that such an event is imminent; the reports identify risks and areas for scrutiny.
Products Worth Considering
Logitech MX Master 4 Ergonomic Wireless Mouse with Haptic Feedback, Graphite
Logitech MX Keys S Combo Wireless Keyboard and Mouse, Graphite
Logitech MX Mechanical Wireless Illuminated Keyboard, Tactile Quiet, Graphite
As an affiliate, we earn on qualifying purchases.
Two Supervisors, Different Evidence
The Fed’s survey is a twice-yearly exercise asking market contacts which shocks could do the most damage to the U.S. financial system over the next 12 to 18 months. It is a measure of respondents’ concerns, not a forecast or a formal probability assessment. The panel is small, and the report does not identify its members. The Fed says cyberattacks and fiscal debt sustainability were rated as having the most severe potential consequences, even though AI received the most mentions.
Other risks named in the survey included a correction in risk assets, at 52%; higher long-term interest rates, at 48%; cyberattacks, at 43%; and fiscal debt sustainability, also at 43%. These are shares of the surveyed contacts, not estimates of the likelihood of each event occurring. The Fed’s report describes the banking system as “sound and resilient” while noting elevated equity valuations and risks related to cyber threats and financing.
APRA’s outlook focuses on threats to the Australian financial system and its planned stress-testing work. Its warning about frontier AI models concerns their ability to detect and exploit software flaws. The source material does not say APRA has confirmed a particular incident caused by those models. Taken together, the reports show regulators considering both market exposures and technology-related operational risks, but they do not constitute a joint assessment.
“Frontier AI models, including those from Anthropic and OpenAI, are speeding up cyber threats.”
— Australian Prudential Regulation Authority
Survey Limits and Open Questions
The Fed survey does not show how likely an AI-related shock is, how much damage it would cause or whether respondents’ concerns will translate into losses. Its sample comprised 23 unnamed contacts, and the answers were gathered before November events. The report gives no figure for the increase in reports of agentic systems being involved in cyber events, saying only that reports have increased since May.
Details of APRA’s planned stress test remain limited in the material available here. It does not specify which scenarios will be tested, which institutions will take part, how results will be published or what supervisory action could follow. The reported finding that few institutions tested provider switching is not accompanied by a sample size or testing methodology. The extent of concentration among AI providers and the ability of individual firms to replace them are also not quantified.
The reports identify concerns, not proof that AI has caused a system-wide financial disruption. The scale and timing of any market correction, cyber incident or provider outage remain unknown.
APRA’s 2027 Test and Monitoring
APRA has said its 2027 System Stress Test will examine AI-driven economic disruption. Further details on scenarios, participants and the timetable would clarify how the regulator plans to assess firms’ exposure and readiness. The source material does not give a more specific date for the exercise.
For the Fed, the November report provides a current snapshot of market contacts’ concerns, with another survey expected as part of its twice-yearly process. In the meantime, the report’s discussion of AI-related borrowing, cyber capabilities and third-party dependencies identifies areas supervisors are watching. Whether those concerns lead to new requirements or further measures is not stated in the material.
Key Questions
What did the Fed’s survey find about AI?
87% of 23 market contacts surveyed in September and October named AI as a risk to U.S. financial stability, up from 50% of 20 contacts in the spring. The Fed says the results are respondents’ views, not its own.
What AI risks did market contacts identify?
They pointed to possible losses if AI-related investments disappoint, AI-enabled cyberattacks and complex financing connected to the AI buildout. The report also discusses risks from dependence on critical third-party providers.
What will Australia’s APRA test in 2027?
APRA says its 2027 System Stress Test will examine AI-driven disruption. The available source material does not specify the test scenarios, participating institutions or publication schedule.
No. The Fed survey records concerns among a small group of market contacts, while APRA describes risks and planned testing. Neither source establishes that a system-wide disruption is imminent or gives a probability for one.
Why are shared AI providers a concern?
The Fed warns that a disruption at a critical third-party provider could affect several financial institutions, especially if alternatives are limited. APRA’s outlook, as summarized in the source material, says few institutions had tested a way to switch away from critical AI providers.
Source: ThorstenMeyerAI.com
