MeitY Releases Second Digital Threat Report for India's BFSI Sector, Highlights AI Asymmetry in Cybersecurity

The Ministry of Electronics and Information Technology (MeitY), along with the Indian Computer Emergency Response Team (CERT-In), the Computer Security Incident Response Team in Finance (CSIRT-Fin), and global cybersecurity firm SISA, has unveiled the second edition of the Digital Threat Report 2025-26. This comprehensive report, released on July 15, 2026, provides a crucial assessment of the evolving cyber threat landscape facing India's Banking, Financial Services and Insurance (BFSI) and digital payments sectors. A central finding of the report highlights 'AI asymmetry' as a significant and growing risk. This phenomenon refers to the accelerating imbalance where cybercriminals are leveraging Artificial Intelligence to develop and execute sophisticated attacks at machine speed, outpacing the defensive and regulatory mechanisms in place. The report warns that activities once requiring specialized expertise can now be performed by low-resource threat actors, drastically escalating risks for the BFSI sector. Furthermore, the report notes that six of the seven forward-looking predictions made in its previous edition have already materialized, demonstrating the shrinking time between a threat's emergence and its widespread exploitation, often from years to mere months or weeks. Modern cyberattacks are increasingly sophisticated, often masquerading as legitimate user sessions, approved payments, or routine workflows, making them exceptionally difficult to detect until substantial damage has occurred. To counter these evolving threats, the report strongly advocates for robust public-private partnerships. MeitY Secretary S. Krishnan emphasized that such collaborations are vital for strengthening digital trust and national cyber resilience. The report recommends a shift from periodic security audits to continuous risk assessment, enhanced real-time threat intelligence sharing, coordinated incident response, and improved cloud and supply-chain security. It also calls for the adoption of AI-enabled cyber defense mechanisms and stronger coordination among regulators, financial institutions, and cybersecurity agencies to build a resilient and secure digital financial ecosystem.