EU unveils action plan on cybersecurity and AI

The European Commission has published an Action Plan on Cybersecurity and Artificial Intelligence, setting out new EU measures for frontier AI evaluation, structured access, testing, vulnerability remediation, and cyber skills.

• The Commission says it will support an EU evaluation capacity for AI models that must include cybersecurity in 2027, and the Commission in coordination with ENISA will define a European Blueprint for structured access to advanced AI capabilities for cybersecurity purposes in Q4 2026.
• The plan also says ENISA and the JRC will organise a secure testing platform for AI in cybersecurity use cases, while ENISA will launch a first pilot of a Critical Open Source Resilience Campaign in 2026 and the Commission, with support of the ECCC and ENISA, will launch an EU Grand Challenge on AI-assisted vulnerability remediation in Q4 2026.