There’s an invisible war being waged in the digital shadows of India’s most critical sectors, and the casualty count is rising faster than most people realize. Let me start with a chilling observation: healthcare and finance—two pillars of modern society—are under siege from cybercriminals at a scale that defies casual comprehension. In just the first half of 2026, these sectors faced over 3.7 lakh cyberattacks, a number that’s already outpacing 60% of last year’s total. But here’s the kicker: this isn’t just a statistical blip. It’s a warning shot across the bow of our collective cybersecurity preparedness. Personally, I think the fact that healthcare alone accounted for nearly 55% of all detected threats in this period is a red flag that screams ‘systemic vulnerability.’ Hospitals aren’t just storing medical records anymore; they’re holding the keys to life-or-death decisions, and yet their digital defenses are being tested relentlessly.
What makes this particularly fascinating is the contrast with the banking sector. While finance as a whole saw a surge in attacks, targeted intrusion campaigns against banks actually dropped from 39 in 2025 to 17 in the first half of 2026. This isn’t a sign of victory—it’s a tactical shift. Cybercriminals are likely pivoting to softer targets, or perhaps banks have finally caught up to the reality of their own exposure. From my perspective, this could mean two things: either the financial sector has invested heavily in defensive measures (a rare silver lining), or attackers are simply running out of low-hanging fruit in that space. Either way, the implications are huge. If banks are becoming harder to crack, where do the bad actors turn next? The answer, it seems, is healthcare—a sector that’s still grappling with legacy systems and inconsistent security protocols.
Let’s talk about the elephant in the room: AI. The data from CERT-In reveals something startling. Cybersecurity exercises for critical infrastructure now include scenarios targeting ‘frontier AI models.’ This isn’t just about hypotheticals anymore. The fact that one of the power sector’s drills focused on AI-related threats suggests that the very tools we’re using to defend ourselves are also becoming weapons in the hands of adversaries. A detail that I find especially interesting is how quickly this shift is happening. Just a year ago, AI was still seen as a futuristic solution; now it’s a battlefield. What this really suggests is that the next wave of cyberattacks won’t just exploit software vulnerabilities—they’ll weaponize the algorithms we’ve come to rely on. Imagine a scenario where a malicious AI model infiltrates a hospital’s diagnostic system, subtly altering patient data to cause chaos. The ethical and practical ramifications are staggering.
And then there’s the broader picture of preparedness. CERT-In’s exercises for the power sector involved 274 participants this year, compared to 150 last year. On the surface, this looks like progress. But I can’t help but wonder: are we training for the right threats? The inclusion of AI in these drills is a step forward, but it also highlights a deeper issue. Our response mechanisms are playing catch-up with a threat landscape that evolves faster than our policies can adapt. What many people don’t realize is that cybersecurity isn’t just about reacting—it’s about anticipating. The fact that we’re now simulating AI-driven attacks means we’ve acknowledged that the future of cyber warfare is no longer confined to traditional hacking. It’s a new frontier, one where the lines between defense and offense blur daily.
If you take a step back and think about it, the numbers tell a story of imbalance. Finance and healthcare are bearing the brunt of cyberattacks, while other critical sectors like energy are getting more attention in preparedness exercises. This raises a deeper question: are we prioritizing the right sectors? Healthcare’s vulnerability is not just a technical issue—it’s a human one. A single breach could compromise millions of lives, yet the sector’s digital infrastructure remains fragmented. Meanwhile, the finance sector, though under attack, seems to have developed a more robust shield. What does this say about our approach to risk management? Are we treating cyber threats as a uniform threat, or are we failing to recognize the unique vulnerabilities of each sector?
In my opinion, the real challenge here isn’t just the numbers—it’s the mindset. Cybersecurity has become a reactive field, constantly playing defense against an enemy that’s always one step ahead. But what if we started thinking differently? What if we treated AI not just as a tool for defense, but as a partner in proactive threat detection? The future of cybersecurity lies in reimagining our strategies, not just scaling up our current ones. The data from CERT-In is a wake-up call, not a final verdict. The question is: will we act before the next major breach becomes the defining event of our time?
