RBI Tightens Cybersecurity Compliance for Banks Amid Rising Attacks
What Happened?
The Reserve Bank of India (RBI) is enhancing cybersecurity measures for banks, demanding proof of compliance as cyberattacks increase. Banks are also urged to assess their APIs for vulnerabilities.
Key points
- RBI has requested banks to enhance cybersecurity measures and demonstrate compliance.
- Banks must check their APIs for security gaps, as they connect with non-bank lenders and fintech companies.
- The RBI is concerned about the risks associated with AI in cybersecurity.
- Recent incidents include a data leak at State Bank of India affecting 3,900 customers.
- Two non-bank lenders in Mumbai lost around $2 million due to unauthorized transfers linked to API vulnerabilities.
- CERT-In has warned about hackers stealing API credentials to move money from banks.
Key insights
- Strengthening cybersecurity measures may reduce the risk of financial losses for banks.
- Smaller lenders and their service providers are seen as vulnerable targets by hackers.
- The focus on AI-related risks indicates a shift in the threat landscape for financial institutions.
Why it matters
The RBI's actions could enhance the security of financial institutions, protecting customer data and funds.
Tags
Entities
Source
Times of India



