India, Nov. 5 -- India's cybersecurity watchdog CERT-In has issued a critical warning to entities in the banking, financial services and insurance (BFSI) sector over an escalating campaign of AI-driven cyberattacks targeting payment and disbursement APIs.

In an advisory dated November 4, 2026, the Indian Computer Emergency Response Team (CERT-In) identified the threat actor behind the campaign as 'CRAFTY FALCON', describing it as an AI-assisted financial threat actor that uses machine intelligence to identify targets, execute attacks at machine speed and exploit victims' own payment and disbursement APIs to initiate unauthorised fund transfers.

Banks, non-banking financial companies (NBFCs), fintech companies and other financial service...