Threat Report 2024

  • Launch of Digital Threat Report 2024: The Ministry of Electronics and Information Technology released the Digital Threat Report 2024, focusing on the Banking, Financial Services, and Insurance (BFSI) sector.
  • Collaborative Effort: The report is a joint effort by SISA, CERT-In, and CSIRT-Fin, providing an in-depth analysis of cybersecurity risks.
  • Social Engineering Increase: Business Email Compromise (BEC) and phishing attacks are becoming more targeted and successful against BFSI institutions. Why: These attacks bypass traditional security measures, causing significant damage.
  • Supply Chain Risks: Vulnerabilities in third-party vendors and open-source software are major threats. Why: Highlights the need for improved vendor risk management.
  • Evolving Compliance: Regulatory frameworks are becoming more harmonized. Why: Compliance should be seen as a strategic tool for growth and cyber resilience.
  • Persistent Control Gaps: Misconfigurations and weak access controls remain a problem. Why: These gaps provide easy entry points for attackers.
  • AI-Powered Threats: The report warns of AI being used for personalized and large-scale attacks. Why: AI enhances the sophistication and scale of cyber threats.