The overall message is that software-centric defenses won’t hold against AI-enabled attackers; the path to durability lies in hardware-based, regulator-aligned, and quantum-ready strategies.

Ledger’s Enterprise HSM On-Premise is presented as a concrete solution, with offline-generated keys protected by FIPS 140-2 Level 3 hardware and executive validation, claimed to mitigate AI-enabled threats.

Regulators are tightening resilience requirements through frameworks like Basel III and the EU's Digital Operational Resilience Act, while traditional custody models that rely on software raise compliance concerns because keys reside in software.

Executive guidance urges a rethink of security architecture around hardware isolation, proactive regulatory engagement, and post-quantum planning to stay resilient against machine-speed threats.

AI-driven cyberattacks surged in 2025, with a sharp increase in breach speed, reinforcing the view that traditional security models are no longer sufficient.

The growing threat from quantum computing makes post-quantum readiness essential to avoid encryption debt in the future.

AI speeds attackers’ capabilities by enabling rapid code scanning, pattern recognition, novel vectors, and real-time adaptation, compressing defense response windows to nearly zero.

Hardware-enforced security, such as on-premise HSMs, is proposed as the new security perimeter, moving key management into certified hardware within institutions to avoid AI-targeted software vulnerabilities.