The rapid advancement of artificial intelligence (AI) is reshaping the digital landscape, bringing both unprecedented opportunities and significant risks. On July 9, 2026, the European Commission unveiled an ambitious Action Plan for a Structured Response to Advanced AI in Cybersecurity, aiming to address the growing threats posed by malicious use of AI while harnessing its potential to strengthen cyber defenses across Europe. This initiative marks a pivotal moment in the EU’s strategy to balance innovation with security in an increasingly complex digital world.

A New Era of Cyber Threats and Opportunities

The rise of advanced AI models is fundamentally altering the cybersecurity landscape. These powerful systems can be used not only for defensive purposes—such as detecting vulnerabilities, automating threat responses, and improving incident management—but also for offensive operations. Cybercriminals are increasingly leveraging AI to identify weaknesses in software, automate attacks at scale, and evade traditional security measures. The speed and sophistication of these threats have outpaced current defenses, prompting the EU to take decisive action.

The European Commission’s Action Plan is designed to address this dual-edged nature of AI by fostering a proactive approach to cybersecurity. It emphasizes the need for a coordinated effort across Member States, industry stakeholders, and EU institutions to build resilient digital infrastructure while mitigating the risks associated with advanced AI models.

Evaluating AI Models: A Critical First Step

One of the key pillars of the Action Plan is the evaluation of AI models before they are deployed in the European market. Under the AI Act, which comes into effect on August 2, 2026, all advanced AI systems must undergo rigorous risk assessments to ensure they meet safety and ethical standards. This includes evaluating how these models can be misused or exploited for malicious purposes.

To support this regulatory framework, the Commission will launch a dedicated call for proposals in early 2026 to establish an EU-wide evaluation capacity focused on cybersecurity. This initiative is expected to be operational by 2027 and will play a crucial role in strengthening the AI Office’s ability to assess third-party AI capabilities globally.

The establishment of this evaluation capacity reflects Europe’s commitment to sovereign innovation in AI, ensuring that critical technologies are developed and regulated within the EU. It also underscores the importance of transparency and accountability in the deployment of advanced AI systems for cybersecurity purposes.

Structured Access to Advanced AI Capabilities

Another major component of the Action Plan is the creation of a European blueprint for structured access to advanced AI capabilities. The Commission recognizes that many public and private organizations may lack the resources or expertise to effectively leverage these powerful tools for cybersecurity. To address this gap, it will work closely with the EU Agency for Cybersecurity (ENISA) to develop clear guidelines on how to securely access and use high-performance AI models.

This initiative is expected to support a wide range of stakeholders, including financial institutions, energy providers, healthcare organizations, transportation companies, and public administrations. By providing a standardized framework for accessing advanced AI systems, the EU aims to ensure that these technologies are used responsibly and effectively in critical sectors.

The blueprint will also include guidance on ethical use, data privacy considerations, and best practices for integrating AI into existing cybersecurity frameworks. This holistic approach is essential for building trust in AI-driven security solutions while minimizing potential risks.

Testing AI for Cybersecurity: A Secure Platform for Innovation

To further enhance the EU’s cybersecurity capabilities, ENISA and the Commission’s Joint Research Centre will collaborate on creating a secure platform for testing AI systems dedicated to cybersecurity. This platform will include simulated environments that allow developers and security professionals to experiment with AI models in controlled settings.

The purpose of this initiative is twofold: first, it will help organizations understand how to safely implement AI-driven security solutions; second, it will provide a space for innovation where new techniques can be tested without exposing real-world systems to potential threats. This approach aligns with the EU’s broader goal of promoting resilient and secure digital infrastructure.

By making this platform available to critical sectors such as finance, energy, health, transport, and public administration, the Commission is ensuring that AI technologies are not only developed but also deployed in a way that prioritizes safety and effectiveness. This will help organizations stay ahead of emerging threats while maintaining compliance with EU cybersecurity regulations.

Reinforcing Cybersecurity Practices and Building Resilience

The Action Plan also emphasizes the importance of intensifying cyber hygiene practices across all sectors. As AI becomes more integrated into digital systems, it is essential that organizations adopt a proactive approach to security by design. This includes implementing robust risk management frameworks, regularly updating software and hardware, and ensuring that AI models are used in ways that align with cybersecurity best practices.

To support this transition, the Commission will encourage the use of already available AI capabilities, including open-source models, to identify and fix vulnerabilities more quickly. Open-source tools can play a vital role in democratizing access to advanced security technologies while fostering collaboration between public authorities, businesses, and developers.

ENISA will also facilitate partnerships within the cyber ecosystem by providing guidance, recommendations, and best practices for integrating AI into existing cybersecurity strategies. Additionally, it will launch a campaign to secure Critical Open Source Software, ensuring that open-source tools used in critical infrastructure are protected against potential vulnerabilities and threats.

Scaling European AI Capabilities: The EU Grand Challenge

To stimulate innovation and investment in AI for cybersecurity, the Commission will launch the EU Grand Challenge on AI for Cybersecurity. This competition will bring together companies, researchers, and organizations to develop cutting-edge AI solutions that address pressing security challenges.

The initiative is part of a broader effort to strengthen Europe’s sovereign AI capabilities, leveraging existing infrastructure such as AI Factories and future Gigafactories. These facilities are designed to support the development and deployment of advanced AI systems while ensuring alignment with EU regulations and ethical standards.

In this context, the upcoming European Tech Equity Capacity—announced in the Tech Sovereignty Package—is expected to play a key role in attracting private investment to scale up homegrown AI capabilities. By fostering collaboration between public and private sectors, the EU aims to build a resilient and competitive AI ecosystem that is both secure and innovative.

Conclusion

The European Commission’s Action Plan for Advanced AI in Cybersecurity represents a comprehensive and forward-thinking approach to addressing the complex challenges posed by emerging technologies. By focusing on evaluation, structured access, testing, and scaling of AI capabilities, the EU is taking significant steps to strengthen its digital defenses while promoting responsible innovation.

For readers interested in AI and cybersecurity, this initiative highlights the growing importance of regulatory frameworks in shaping the future of technology. As AI continues to evolve, it will be essential for policymakers, industry leaders, and researchers to work together to ensure that these powerful tools are used ethically and securely.

Looking ahead, key areas to watch include the implementation of the AI Act, the development of secure AI testing platforms, and the progress of the EU Grand Challenge. These developments will not only shape the future of cybersecurity in Europe but also influence global standards for AI governance and security.

---

Original Source

This article is based on publicly available reporting. For the complete original story, visit the publisher’s article.