Canonical event

India CERT-In issues updated critical advisory on Crafty Falcon AI-assisted attacks against financial APIs

India's CERT-In/CSIRT-Fin published critical advisory CIAD-2026-0058 on 4 November 2026, updating an October 9 warning and reporting a continuing wave of intrusions against fintech, non-bank lenders and payment providers. Its incident-based assessment describes misuse of cloud management, shared staging-to-production credentials, modified client packages and AI-enabled offensive tools. The authority's findings and claimed attacker toolchains are not a public independent forensic reproduction, state attribution or proof that every attack step was autonomous. November 4 dates the new escalation advisory, not the campaign's origin.