The Reserve Bank of India (RBI) has heightened its scrutiny of banks’ cybersecurity measures in response to a surge in cyberattacks targeting financial infrastructure. The central bank is reportedly seeking evidence of compliance with existing regulations and details regarding banks’ preparedness for risks associated with artificial intelligence (AI). This increased vigilance comes as global financial institutions face sophisticated attacks from hackers employing advanced AI tools, which pose significant threats to customer data and financial assets.

Regulatory bodies in various countries, including the United States and the United Kingdom, are also intensifying their efforts to mitigate risks linked to AI technologies. The RBI’s proactive approach aims to ensure that Indian banks are not only aware of these threats but are also taking necessary steps to fortify their cybersecurity frameworks.

In a series of recent discussions, the RBI has urged banks to examine vulnerabilities in application programming interfaces (APIs). These APIs serve as essential software connections that facilitate interactions between banks and non-bank lenders, as well as fintech companies. According to insiders familiar with the regulatory perspective, hackers view smaller lenders and their third-party vendors as more accessible targets, making it imperative for banks to address these weaknesses.

Recent Cyber Incidents Highlight Vulnerabilities

India has witnessed a notable increase in cyber incidents in recent weeks, raising alarms among financial institutions. One significant case involved the State Bank of India, the largest lender in the country, which reported a data breach affecting 3,900 customers. The bank is currently investigating the incident to ascertain the underlying vulnerabilities that led to the breach.

Another alarming incident occurred with two non-bank lenders based in Mumbai, which reportedly lost approximately $2 million due to over 700 unauthorised instant transfers from accounts held with ICICI Bank on October 8 and 9. A police complaint reviewed by Reuters indicates that hackers compromised the API link used for transmitting loan disbursal instructions to ICICI Bank, highlighting the potential risks associated with API security.

ICICI Bank has not yet responded to requests for comments regarding the incident. The rise in such attacks has prompted India’s cyber agency, CERT-In, to issue warnings about hackers stealing banks’ API credentials to facilitate unauthorised transactions, potentially leveraging AI-assisted tools. In a bid to enhance cybersecurity awareness, CERT-In conducted training for 300 officials from over 55 financial institutions earlier this week.

Regulatory Push for Stronger Cybersecurity Measures

The RBI’s ongoing efforts to bolster cybersecurity within the banking sector are underscored by its previous directives aimed at managing cybersecurity risks. However, sources indicate that the implementation of these directives has not kept pace with the evolving threat landscape. As a result, the regulator is now pressing banks to strengthen their cybersecurity measures and ensure compliance with established guidelines.

Insiders have noted that discussions surrounding these issues have not been made public, leading to a lack of transparency regarding the regulatory expectations. The RBI has yet to respond to inquiries seeking clarification on its recent actions and directives. As the threat of cyberattacks continues to escalate, the central bank’s proactive stance is crucial in safeguarding the integrity of India’s financial system.

In conclusion, the RBI’s intensified oversight reflects a growing recognition of the vulnerabilities within the banking sector, particularly in light of the increasing sophistication of cyber threats. As financial institutions navigate this challenging landscape, the emphasis on compliance and preparedness will be vital in mitigating risks associated with AI-driven cyberattacks.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store – https://apps.apple.com/in/app/newspin/id6746449540

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share