India Inc. faces a growing paradox: as the adoption of digital tools accelerates, digital security preparedness is not keeping pace. While investments in advanced technologies like AI, detection systems, and security software are increasing, many organizations remain vulnerable to real-world cyberattacks.
Recent data underscores this concerning trend. Cybersecurity incidents reported to the Indian Computer Emergency Response Team (CERT-In) have nearly doubled in three years, surging from 1.39 million in 2022 to a staggering 2.58 million by October 2025. This escalation highlights a persistent upward trend in cyber threats targeting both organizations and individuals in India. Indian organizations faced an average of 2,011 cyberattacks per week in 2025, significantly higher than the global average.
Several factors contribute to this paradox. One key issue is the "reporting gap," where private sector organizations under-report breaches to avoid reputational damage or regulatory scrutiny. This lack of transparency hinders a comprehensive understanding of the threat landscape and impedes effective mitigation efforts.
Execution gaps, weak control over third-party vendors, and untested response plans further exacerbate vulnerabilities. Despite increased cloud adoption, a significant percentage of sensitive cloud data remains unencrypted, and many organizations struggle to detect breaches quickly. Tool sprawl, where enterprises operate numerous disconnected security products, also worsens visibility gaps.
The types of cyberattacks faced by Indian organizations are also evolving. While traditional signature-based detection methods still identify a majority of threats, behavior-based detection is on the rise, indicating the emergence of novel and sophisticated attack methodologies. Trojans and infectors constitute a significant portion of malware detections, suggesting a strategic shift by attackers towards more targeted campaigns. Phishing and social engineering attacks, UPI and digital payment frauds, cloud misconfigurations, infostealer malware, and ransomware attacks are among the major threats.
AI is becoming a double-edged sword in the cybersecurity landscape. On the one hand, AI-powered attacks, including AI-generated phishing kits and deepfake-enabled fraud, are lowering the barrier to entry for cybercriminals. On the other hand, AI offers the potential to enhance threat detection and response capabilities. AI systems can analyze vast amounts of data to identify vulnerabilities and predict attack patterns, enabling proactive defense.
To address this cyber paradox, a multi-faceted approach is required. The government is implementing initiatives like the Information Security Education and Awareness (ISEA) project to build capacity and train cybersecurity professionals. Organizations need to prioritize continuous cybersecurity training, maintain comprehensive asset inventories, and invest in managed extended detection and response (XDR) solutions. They should also focus on strengthening cloud security, implementing zero-trust architectures, and ensuring compliance with data protection regulations like the Digital Personal Data Protection Act (DPDPA). Collaboration between businesses, law enforcement, and cybersecurity firms is also crucial to disrupt cybercriminal enterprises.
The cybersecurity landscape in India is rapidly evolving, and organizations must adapt to stay ahead of emerging threats. By addressing execution gaps, strengthening security practices, and embracing AI-powered solutions, India Inc. can bridge the digital security gap and build a more resilient digital ecosystem.
