MeitY Releases Digital Threat Report 2025–26 to Strengthen Cybersecurity in India’s BFSI Sector

As India’s digital financial ecosystem continues to expand rapidly, cyber threats are becoming more sophisticated, faster, and increasingly difficult to detect day by day. To help the financial institutions to prepare for this evolving landscape, the Ministry of Electronics and Information Technology (MeitY), in collaboration with the CERT-In, CSIRT-Fin and cybersecurity firm SISA has released the 2nd edition of the Digital Threat Report 2025-26 for the Banking, Financial Services and Insurance (BFSI) sector and the digital payments ecosystem. This report highlights the emerging cyber risks, and the growing mpact of the artificial intelligence (AI) on cyberattacks and also provides an 18-month roadmap to enhance the India’s cyber resilience.

What Is the Digital Threat Report 2025-26?

The Digital Threat Report 2025-26 is a comprehensive cybersecurity assessment that is designed for the banks, financial institutions, payment service providers, regulators and cybersecurity professionals.

It evaluates the evolving cyber risks that are affecting the country’s BFSI sector and provides strategic recommendations to strengthen the digital trust and operational resilience.

The report combines the,

• Digital Forensics and Incident Response (DFIR) research
• Threat intelligence from CERT-In
• Observations from CSIRT-Fin
• Research on adversarial Artificial Intelligence (AI)
• Analysis of emerging cyberattack trends

Reports primary objective is to help organizations to anticipate threats before they cause widespread disruption.

Key Findings of the Report

One of the report’s most significant observations is the rapid evolution of the cyber threats.

According to the report,

• Six out of the seven predictions made in the previous edition have already materialized.
• The time between the emergence of a cyber threat and its exploitation has reduced dramatically.
• Threats which once took years to evolve are now becoming operational within just few weeks or months.

Also this shrinking timeline demands the continuous monitoring rather than periodic security assessments.

AI Asymmetry Emerges as a Major Cybersecurity Risk

The report identifies the AI asymmetry as one of the biggest cybersecurity challenges facing financial institutions.

What Is AI Asymmetry?

AI asymmetry refers to the that situation where cybercriminals can leverage the artificial intelligence to launch sophisticated attacks much faster and at lower costs than defenders can respond.

Activities that previously required the,

• Specialized hacking teams
• Significant financial resources
• Weeks of preparation

can now be executed by relatively low-resource attackers using the AI-powered tools.

Cyber Threats Are Becoming Harder to Detect

The report also notes that modern cyberattacks often resembles the legitimate business activities, making them increasingly difficult to identify.

Instead of just traditional malware-based intrusions, attackers now exploits the,

• Legitimate user sessions
• Approved financial transactions
• Trusted workflows
• Valid user credentials
• Cloud infrastructure
• Software supply chains

As a result of this, organizations may not detect an attack until financial or operational damage has already occurred.

Common Cyber Threats Affecting the BFSI Sector

The report highlights the several attack methods which have become mainstream across the financial ecosystem.

Key Threats Are,

• Social engineering attacks
• Credential theft
• Supply chain compromises
• Cloud infrastructure exploitation
• AI-assisted cyberattacks
• Identity-based attacks
• Business process manipulation

These attack vectors continue to evolve with the alongside digital banking and online payment technologies.

The Framework of Cyber Failure Anatomy

One of the main features of this year’s report will be the Cyber Failure Anatomy Framework which consists of 4 layers.

This framework allows to see cyber incidents as not isolated failures and to see how they come together and help criminals to conduct successful attacks.

Thanks to the framework, organizations can:

• Identify their security gaps
• Reveal systemic weak points
• Allocate financial resources properly for cybersecurity
• Develop the organization as a whole
• Enhance risk management

18-Month Cybersecurity Roadmap

Apart from identifying threats, the report outlines the practical roadmap for improving cyber resilience over the next 18 months.

Recommended Priorities

• Strengthen the foundational cybersecurity controls
• Implement continuous risk assessments
• Enhance real-time threat monitoring
• Improve information sharing among institutions
• Build resilient security architectures
• Increase collaboration between regulators and industry

This roadmap also encourages organizations to move away from reactive cybersecurity practices toward proactive resilience.

Why this Report Matters for India’s Financial Sector

India’s BFSI ecosystem is becoming increasingly interconnected via,

• Digital banking
• Unified Payments Interface (UPI)
• Mobile payments
• Cloud infrastructure
• FinTech innovations
• Artificial Intelligence

While these technologies improves the customer experience and financial inclusion, they also expand the attack surface available to the cybercriminals.