AI Asymmetry Among Top Risks Facing Financial Institutions

Experts on Monday highlighted AI asymmetry as one of the defining risks facing financial institutions, saying that activities that once required specialist teams, significant resources and weeks of effort can increasingly be performed at machine speed by comparatively low-resource threat actors.

This is placing offensive capabilities on a faster development curve than many of the defensive and regulatory mechanisms designed to contain them, they said.

IT Ministry, along with the Indian Computer Emergency Response Team (CERT-In), the Computer Security Incident Response Team in Finance (CSIRT-Fin) and SISA, released the second edition of the ‘Digital Threat Report 2025–26’ for the Banking, Financial Services and Insurance (BFSI) and payments ecosystem.

“As cyber threats become increasingly sophisticated, trusted partnerships between public institutions and industry are essential to strengthening digital trust. The ‘Digital Threat Report’ represents a meaningful collaboration among CERT-In, CSIRT-Fin and SISA,” said S. Krishnan, Secretary, MeitY,

This partnership demonstrates how expertise developed in India can contribute both to our national cyber resilience and to advancing cybersecurity knowledge globally, he told the gathering.

The report draws on extensive digital forensics and incident response (DFIR) research, analysis aligned with CERT-In and CSIRT-Fin observations, and research into adversarial AI.

Its central finding is that six of the seven forward-looking predictions made in last year's edition have already reached full-scale realisation.

This rapid progression demonstrates how the time between the emergence of a threat and its operational exploitation is shrinking, often from years to months or even weeks.

"The distance between innovation and exploitation has narrowed dramatically, and that single shift changes everything about how our industry must defend itself," said Dharshan Shanthamurthy, Founder and CEO, SISA, a global leader in cybersecurity for the payment ecosystem.

The report provides financial institutions, regulators and cybersecurity leaders with an executive assessment of the threats reshaping banking, financial services, insurance and digital payments.

Dr Sanjay Bahl, Director General, CERT-In, said that as India’s financial ecosystem becomes more interconnected, real-time and technology-driven, cyber resilience must be treated as a shared responsibility across institutions, regulators and the wider digital supply chain.