20 Financial Firms Hit by Cyberattacks Exploiting API Flaws
Around 20 financial institutions, including banks and Non-Banking Financial Companies (NBFCs), were targeted in a series of cyberattacks earlier this month, according to The Economic Times. Attackers allegedly used stolen credentials from partner banks to exploit vulnerabilities in a widely used software platform, siphoning funds by bypassing normal security checks. The Indian Computer Emergency Response Team (CERT-In) issued a critical advisory, warning that attackers may be using AI-assisted tools to identify weaknesses in Application Programming Interfaces (APIs, which allow different software systems to communicate) and execute fraudulent transfers.
What this means
This isn't just a simple hack; it's a systemic warning about the growing risks of a deeply interconnected financial system. Banks and fintechs rely heavily on third-party APIs for everything from payments to loan disbursals. These attacks show that even if a bank's own systems are secure, a vulnerability in a partner's software can create an open backdoor. The alleged use of AI to probe for weaknesses means attacks can happen faster than human security teams can react. This incident will almost certainly trigger a wave of security audits across the industry, forcing institutions to scrutinize not just their own code but the security posture of every vendor they connect with. Expect the RBI to tighten its guidelines on third-party technology risk management soon.
Most affected: Bank & Fintech IT Security
Key takeaway: Banks must immediately review security controls for all third-party API integrations, especially those related to payment and fund disbursement.
Get stories like this in your inbox every morning
Free daily brief — rates, RBI updates and the banking stories that matter, in 3 minutes.
More in this briefing
- Fairfax to Buy 60.72% of IDBI Bank for ₹52,878 Crore in Record Deal
- Hot US Inflation Data Sparks Wall Street Sell-Off, Hits AI Stocks
- India's Wholesale Inflation Surges to 30-Month High of 11.4%
- Canara Bank Q2 Net Profit Rises 8.4% to ₹5,175 Crore on Better Asset Quality
- CSB Bank Shares in Focus as Promoter Fairfax Faces IDBI Hurdle