The European Commission has presented a plan for this deal with the risks And take advantage of the opportunities from advanced artificial intelligence (AI) in cybersecurity.
While AI can improve security, it can also be abused to identify vulnerabilities, automate attacks, and significantly increase the scale and speed of cyber incidents. The new plan will bring together EU countries, industry and EU-level organizations to strengthen the cybersecurity of our digital landscape against the vulnerabilities of advanced AI.
Key actions
- Evaluation of AI models: The AI law requires that advanced AI models be evaluated and their risks assessed before they are brought to the EU market. The Commission will help build an EU assessment capacity to strengthen third-party assessment of AI capabilities and risks globally and support the regulatory function of the AI Office.
- Access to advanced AI models: Europe needs clear and transparent conditions for access to the most advanced AI systems. The Commission will work with the EU Cybersecurity Agency to define a European blueprint for structured access to advanced AI capabilities for cybersecurity and to support public and private organizations in accessing advanced AI models.
- Testing AI for cybersecurity: The EU Cybersecurity Agency and the Commission’s Joint Research Center will create a secure platform to test AI for cybersecurity, including the use of simulated environments. This will provide operators in critical sectors with know-how on the safe use of AI.
- Strengthening EU cybersecurity and addressing vulnerabilities: The EU must protect its critical infrastructure. In line with EU cybersecurity regulations, organizations should strengthen their cyber hygiene practices, risk management measures and security by design principles. You should also start leveraging available AI capabilities to remediate vulnerabilities more quickly and prevent and respond to cyberattacks. The EU Cybersecurity Agency will support them in this transition, including guidelines, recommendations and best practices, as well as a campaign to secure critical open source software.
- Scaling European AI capabilities for cyber: The EU must continue to invest in its own advanced AI capabilities. The AI factories and future gigafactories infrastructure announced in the Tech Sovereignty Package as well as the European tech equity capacity are available for this purpose. The Commission will also launch the EU Grand Challenge on AI for Cybersecurity, bringing together companies, researchers and organizations to develop AI solutions for cybersecurity and support the growth of the EU market.
The new plan aims to strengthen the EU’s cybersecurity framework. It builds on existing EU regulations, including the AI Act, the Cyber Resilience Act, the Network and Information Systems Directive and the Cyber Solidarity Act.
More information
Press release
Fact sheet
Cybersecurity and Artificial Intelligence Action Plan
Artificial intelligence
https://commission.europa.eu/news-and-media/news/new-eu-plan-address-risks-and-opportunities-advanced-ai-cybersecurity-2026-07-07_en
