BIS: Banks Have Minutes, Not Weeks, to Patch Flaws as AI Accelerates Attacks

The BIS is reframing a longstanding operational trade-off: uptime versus security. By arguing that brief, planned outages are now less costly than delayed patches, it shifts the burden onto bank boards and regulators who have historically treated service continuity as the priority. The practical tension sits with smaller institutions that lack the redundancy to absorb downtime without customer-facing disruption, and with supervisors who must decide whether to tolerate it.