👋 Welcome to Digital Identity!

What’s New / Emerging Threats

1. AI‑Powered Attacks Gaining Traction

   • A large fraction of ransomware attacks are now using AI in some part — to generate phishing content, break CAPTCHAs, automate parts of social engineering. 

   • Threat actors are also using AI to personalise attacks (deepfakes, voice impersonation, etc.) to make them more convincing.

2. Massive Increase in Volume & Complexity of Attacks

   • Global cyber‑attacks have increased a lot. For example, on average organizations are seeing many more attacks weekly than in past years. 

   • India in particular is very targeted: high numbers of malware detections, many email threats, rising ransomware incidents. 

3. Ransomware & Ransomware‑as‑a‑Service (RaaS)

   • RaaS remains a major business model for cyber criminals. It lowers the barrier to entry for attackers.

   • Double/triple extortion tactics (not just encrypting data but threatening public exposure, etc.) are common.

4. Credential Theft / Identity / Trust Attacks

   • Exploitation of stolen credentials, phishing, business email compromise are major vectors. Misuse of “trusted” access (inside accounts, privileged identities) is being leveraged more. 

   • Supply Chain & Infrastructure Weaknesses

   • Attacks targeting software providers, third parties, cloud misconfigurations are increasing. Critical infrastructure (utilities, automotive, connected vehicles, etc.) being exposed. For example, IIT Kanpur & ARAI planning to strengthen automotive cybersecurity in India. The Times of India

5. Growing Regulatory / Oversight Pressure

   • Banks and financial institutions in India being asked to step up cybersecurity oversight, including over third parties. 

   • Governments are also pushing cooperation, information sharing, setting up policy frameworks. 

6. Cybersecurity Incidents Rising Sharply in India

   • CERT‑In (India’s computer emergency response agency) has tracked cybersecurity incidents that have quadrupled over ~4–5 years. 

   • India leads in certain categories like malware attack frequency, email threats within Asia etc. 

---

⚠ Challenges & Risks to Watch

• Zero‑day AI attacks: As AI systems become more available and sophisticated, attackers may find and exploit vulnerabilities very quickly. Traditional patch cycles may struggle to keep up. 

• Deepfake & disinformation: Used not just for scams but also for political / information warfare. Requires detection tools & policies. 

• Encryption threatened by future quantum computing: While not imminent perhaps, there’s concern about current cryptography being weakened in the future.