Bank of America Boosts Software Security Spending
The bank hired 1,000 contractors to mitigate vulnerabilities as it faces mounting regulatory and AI-driven security pressures.
Updated on Oct. 15, 2026 in Cybersecurity
Live Poll
Do you trust that major banks are effectively securing your data against new artificial intelligence threats?
Bank of America has mobilized a workforce of 1,000 contractors and 3,000 internal staff to address critical software vulnerabilities. The defensive overhaul follows a $1.2 billion U.S. government fine issued for anti-money laundering and national security reporting failures.
Why it matters
The bank is accelerating its security posture to mitigate risks posed by automated AI agents like Mythos, which can exploit software weaknesses at scale. This defensive effort marks a significant pivot as the firm balances regulatory compliance costs against aggressive automation targets.
The bank incurred $200 million in third-quarter remediation costs to patch software vulnerabilities. These efforts support 130 internal AI initiatives that aim to reach $700 million in annual cost savings by 2027.
The players
Bank of America
A major U.S. financial institution currently managing 130 internal AI initiatives and broad workforce restructuring.
Anthropic
An AI research and deployment company that released the Mythos agent to banks and government agencies.
The details
Bank of America is deploying teams to patch software infrastructure to counter potential exploits from AI agents. Mythos, an AI agent released by Anthropic in April, represents a new class of automated tools capable of identifying and navigating complex enterprise systems. The bank uses internal AI initiatives to automate audit and legal workflows while simultaneously reducing its total workforce by 3,400 positions annually.
Timeline
April 2026: Anthropic released the Mythos AI agent.
Q2 2026: Bank of America hired 1,000 third-party contractors for security.
Q3 2026: The bank incurred $200 million in remediation expenses.
2027: Bank of America targets $700 million in annual AI-driven savings.
The Tech Race
The bank's defensive posture follows the April 2026 release of the Mythos AI agent by Anthropic. This move reflects an industry-wide pivot to fortify systems against high-speed, automated vulnerability exploitation.
Customers may see increased security friction during digital banking as the firm rolls out updated protocols to address identified vulnerabilities. The bank plans to phase out high remediation spending once these core security gaps are sealed.
The takeaway
The bank is betting that aggressive AI automation will eventually offset the massive costs of modernizing its security infrastructure. Observers should track the firm's 2027 progress report to see if AI-driven savings successfully materialize alongside the current remediation expenses.
Further reading
For more on how financial institutions are evolving their defenses, explore the Cybersecurity section.
Live Poll
Do you trust that major banks are effectively securing your data against new artificial intelligence threats?
