New York Releases AI Cybersecurity Guidance: What You Need to Know

**Executive summary:** The New York Department of Financial Services issued guidance for regulated financial institutions to incorporate AI-related cybersecurity risks into existing frameworks, identifying threats such as AI-enabled social engineering and deepfakes, AI-enhanced attacks, exposure of non-public information, and supply-chain vulnerabilities, and recommending mitigations including AI-specific risk assessments, third-party vendor management, robust access controls, employee training, continuous monitoring, and adversarial testing (AI red-teaming).