29/09/2026
Old frauds. New faces. Same target: trust.
Yesterday in Zlatibor, at the Key Trends '26 conference hosted by the Association of Serbian Banks, I joined the panel "New Faces of Old Frauds – Cyber Resilience of the Financial Sector and Critical Infrastructure."
The fraud playbook hasn't changed. What has changed is the speed, scale and credibility of the attacks. A CEO's voice demanding an urgent transfer, a video call "from your bank," flawless phishing in the local language: AI now produces all of it in minutes, at near-zero cost.
Three takeaways from the panel:
🔹 Attackers target people, not systems. Deepfakes and generative AI are industrializing social engineering. Resilience therefore starts with verification protocols and a "verify before you pay" culture. Technology comes second.
🔹 Resilience is a chain, not a wall. Banks, telcos, energy providers and their suppliers share the same risk exposure. SMEs in the supply chain are often the weakest link. That is why NIS2 and DORA shift the focus from perimeter defense to ecosystem-wide resilience.
🔹 AI versus AI. Real-time anomaly detection and cross-institutional threat intelligence sharing are no longer a competitive advantage. They are the baseline.
Bottom line: cyber resilience is a governance issue, not an IT budget line. It belongs in the boardroom.
Thank you to the Association of Serbian Banks - Udruženje banaka Srbije and the Chamber of Commerce and Industry of Serbia - Privredna komora Srbije for an excellent event, and to my fellow panelists for a candid, practical discussion. At Centar za digitalnu transformaciju - CDT, we continue working to make sure businesses, especially SMEs, are ready for this wave.