Banks and Utilities Targeted by AI-Powered Cyberattacks
NCERT warns of automated threats targeting critical infrastructure and core financial systems.
1NCERT Issues Urgent Warning
The National Cyber Emergency Response Team issued an advisory on November 5 regarding the rise of AI-driven cyber threats. The agency noted that sophisticated criminal groups are increasingly utilizing automated bots and agentic tools. These technologies allow attackers to conduct reconnaissance and launch coordinated strikes with unprecedented speed and operational scale.
2Financial Sector Vulnerabilities
Banks face significant risks to core banking systems, digital platforms, and payment gateways. NCERT warns that attackers may attempt to manipulate displayed account balances or disrupt online services entirely. Financial institutions are specifically urged to monitor for frequent authentication failures and unusual API requests that could signal an active credential-based attack.
3Critical Infrastructure Risks
Operational technology and essential utilities, including power grids and water distribution, are under heightened threat. Vulnerabilities in industrial control systems and connected IoT devices could allow attackers to compromise physical processes. Recent European incidents involving supermarket refrigeration systems highlight how cyberattacks can lead to tangible commercial and physical consequences.
4Identifying Potential Intrusions
Organizations should watch for specific anomalies to detect unauthorized access. For banks, this includes discrepancies between core records and user-facing account balances. For utility providers, unexpected changes to temperature, pressure, or cooling control settings in industrial systems serve as primary indicators that a security breach may be currently in progress.
5Securing Financial Platforms
Financial institutions must prioritize the security of their third-party integrations and payment gateways. NCERT recommends enforcing multi-factor authentication and implementing robust protection against automated login attempts. Furthermore, firms should conduct regular integrity checks to ensure that consumer-facing applications remain perfectly synchronized with internal core banking records at all times.
6Protecting Industrial Networks
Utility providers are advised to limit direct internet exposure and restrict remote access to critical assets. Segmenting operational technology networks from standard IT infrastructure is essential to contain potential threats. Companies must also prioritize applying security updates and maintaining verified backup operating procedures to ensure continuity during any potential service disruption.
7Broad Organizational Preparedness
All organizations are encouraged to evaluate their readiness against bot-driven AI attacks immediately. Maintaining comprehensive incident logs and enhancing security monitoring arrangements are critical steps for long-term defense. Preparedness strategies should focus on business continuity planning to mitigate the impact of sophisticated, automated threats that target essential operational service delivery.
8The Evolving Threat Landscape
The integration of AI into cybercriminal operations marks a shift toward more efficient and scalable attacks. While AI involvement in recent physical system compromises remains unconfirmed, the potential for rapid exploitation is clear. Organizations must move beyond static defenses to adopt dynamic monitoring and proactive incident response protocols to remain secure.
Original article: Dawn — Banks and Utilities Targeted by AI-Powered Cyberattacks