However, two sectors require particular attention,” it stressed, referring to financial services, along with operational technology (OT) and critical infrastructure.
It warned banks that they could face attacks targeting core banking systems, digital banking platforms, payment systems and customer-facing applications, with potential scenarios including the disruption of online services, automated credential attacks, and manipulation of displayed account balances.
“A compromise could disrupt physical processes and critical services,” it added.
For critical infrastructure, NCERT said changes to refinery, pipeline, grid, power generation or distribution parameters could indicate an attack, as could unexpected changes to pressure, temperature, cooling or heating control settings.
NCERT also urged all organisations to check their preparedness against bot-driven AI cyberattacks, maintain incident logs and enhance arrangements for incident response, business continuity and security monitoring.