Systemic Risk Council Ranks 13 Threats as AI Cyberattacks and Data-Centre Debt Top the List

London, 10 November 2026 — EBM Newsdesk Analysis 

This week, the CFA Institute Systemic Risk Council ranked 13 threats to global financial stability, naming geopolitical shocks, AI-driven cyberattacks, opaque data-centre financing and sudden extreme climate events as the most urgent. The council, co-chaired by Nobel economist Simon Johnson and former Finnish central bank governor Erkki Liikanen, warns that the top four could disrupt critical infrastructure or freeze capital markets “within hours”. The surprising detail is where it says danger lies. “The next financial crisis may not begin in a bank,” Johnson said.

For European businesses, the message is that risk has moved. The 2008 crisis started in banks, and regulation since then has focused on them. This report argues that the next shock could start somewhere else, in a payments system, an overcrowded investment idea or a data centre’s balance sheet, and spread faster than regulators can respond.

AI at the Centre

Artificial intelligence runs through the report. The council identifies four separate AI risks: cyberattacks on financial infrastructure, investment concentration and bubbles, misinformation, and disruption to jobs.

The warning on data-centre financing is especially timely. Huge sums are being borrowed to build AI infrastructure, often through structures that are hard for outsiders to see. Investors are already questioning whether that spending will pay off, as the sharp falls at SoftBank and Kioxia and the pressure on Google’s cash flow have shown. The council’s concern is not just that the bubble might burst, but that nobody can see clearly who would be hurt if it did.

The Slower-Burning Risks

Beyond the immediate threats, the council highlights three vulnerabilities building in the background.

The first is weaker safeguards. It warns that capital protections at the biggest banks are being reduced, while leverage and secrecy grow among non-bank lenders, a concern that has hung over private credit all year.

The second is government debt. High deficits and rising borrowing costs could unsettle bond markets, a risk the global bond sell-off has already brought into view.

The third is crypto. Growing links between crypto-assets, stablecoins and traditional finance create new ways for trouble to spread.

Longer term, the council points to AI-driven job losses, gradual climate change and pandemics.

The council stresses that its rankings are a judgement on where risks are building, not a forecast of when a crisis will strike. It draws on research from the IMF, the Financial Stability Board and the Bank for International Settlements.

Where I Land

This report is worth reading because of who wrote it. These are not activists or short sellers, but former central bankers and regulators who know how crises spread. Their warning is uncomfortable: the system has been made safer against the last crisis, while new risks have grown in places regulators watch less closely. As Liikanen put it, the greatest threats “often emerge from places where few notice until it is too late.” The collapse of a digital bank in Paraguay last week was a small reminder of how fast that can happen.

Related Analysis

• Eurozone Inflation Hits 4% as ECB Prepares to Raise Rates Into a Stalling Economy
• Inside the Criminal Networks Blurring the Lines Between Cybercrime, Crypto and Financial Fraud
• Fed Shocks Markets With First Rate Rise in Three Years — And More Could Follow