India's Latest Digital Threat Report Warns of Rapidly Evolving Cyber Risks and AI-Driven Attacks

India's cybersecurity landscape is experiencing an unprecedented acceleration in the evolution of threats, as highlighted by the recently released Digital Threat Report 2025-26. This comprehensive report, a collaborative effort by the Indian Computer Emergency Response Team (CERT-In), the Computer Security Incident Response Team in Finance (CSIRT-Fin), and SISA, serves as a critical warning, particularly for the Banking, Financial Services, and Insurance (BFSI) sector. A striking finding reveals that six out of seven cyber threat predictions made in the previous 2024 report have already materialized, demonstrating the drastically shrinking window between the emergence of new attack techniques and their exploitation – from years to mere months or even weeks. The report underscores a fundamental shift in cyberattacks, moving from traditional hacking methods towards "trust-based attacks." Cybercriminals are increasingly exploiting digital identities, artificial intelligence (AI), payment systems, and third-party ecosystems, rather than just targeting passwords. This includes the industrialization of deepfake impersonation, real-time executive video deepfakes, and the use of adversarial large language models (LLMs). The Ministry of Electronics and Information Technology (MeitY) Secretary emphasized the urgent need for India to build resilient software and hardware systems and develop domestic AI and cybersecurity capabilities to effectively counter these advanced threats. The report advocates for an enterprise-wide approach to risk management, highlighting constant vigilance, enhanced awareness, and strengthening identity and access management as foundational elements for robust cyber defense.