As artificial intelligence transforms enterprise operations and empowers sophisticated cyberattacks, Indian organisations must move beyond annual awareness campaigns to continuous monitoring, intelligent identity verification and a security-first culture.
October has traditionally been the month when organisations turn their attention to cybersecurity awareness. Employees receive reminders about phishing, IT teams conduct simulated attacks, and security leaders reinforce the importance of strong passwords and safe digital behaviour. But as October 2026 draws to a close, the challenge facing enterprises is far more complex than remembering not to click a suspicious link.
Artificial intelligence is changing both sides of the cybersecurity equation. Enterprises are deploying AI agents to automate workflows, analyse data, improve customer experiences and accelerate software development. At the same time, cybercriminals are exploiting AI to scale attacks, manipulate identities, generate convincing fraudulent content and identify weaknesses in digital infrastructure.
The result is a widening gap between the speed of digital adoption and the maturity of security practices designed to protect it.
For Indian enterprises, this challenge is particularly significant. The country’s digital ecosystem operates at enormous scale, connecting financial transactions, identity verification, customer onboarding, healthcare services and multilingual consumer experiences. A security weakness in one component can have consequences far beyond an individual organisation.
The message emerging from cybersecurity leaders this awareness month is clear: cyber hygiene must evolve from a collection of periodic precautions into a continuous discipline combining technology, governance, human vigilance and accountability.
“Visibility into AI agents is becoming a non-negotiable part of cyber hygiene.” — Ganesh Narasimhadevara, Director, Solutions Consulting, India, New Relic
AI agents are expanding the cyberattack surface
Artificial intelligence is moving beyond experimental applications into the operational heart of enterprises. AI agents increasingly interact with business applications, retrieve sensitive information, execute tasks and initiate actions with limited human intervention.
This shift is changing the meaning of cyber hygiene, argues Ganesh Narasimhadevara, Director, Solutions Consulting, India, at New Relic.
Indian organisations face a distinctive operating environment, where digital services must support high transaction volumes, interconnected payment systems, identity and onboarding processes, and customer interactions across 22 scheduled languages. AI agents operating within these environments may access customer records, interact with know-your-customer workflows, trigger payment-related processes or connect with production systems serving millions of people.
Each interaction creates potential exposure if access permissions, monitoring and oversight are inadequate.
Traditional security measures remain important, but they are no longer sufficient on their own. Organisations must understand which systems an AI agent can access, what information it can retrieve, what actions it can perform and when human approval is necessary.
The urgency is reinforced by New Relic’s 2026 Observability Forecast, which reports that 93% of organisations are adopting AI agents, while 24.6% run them unmonitored. This creates a governance challenge: enterprises are introducing autonomous capabilities faster than they are establishing mechanisms to observe and control their behaviour.
“AI has doubled the reach of hacktivists and lone operators. Businesses must ensure security investments address the right risks.” — Rajnish Gupta, MD & Country Manager, Tenable India
An agent with excessive privileges or insufficient oversight could expose sensitive information, execute unintended actions or provide attackers with another route into enterprise systems.
Visibility, therefore, must become a foundational security requirement. Organisations need to monitor AI agents throughout their operational lifecycle, establish clear boundaries around their access and identify abnormal behaviour before it develops into an incident.
The business case extends beyond risk reduction. According to New Relic’s forecast, organisations monitoring AI agents in production are twice as likely to report a return of three times or greater on their observability investments than organisations deploying agents without monitoring them.
This suggests that visibility is not simply a defensive measure. It can also help enterprises understand whether AI systems are functioning as intended, delivering business value and operating within acceptable boundaries.
As Narasimhadevara emphasises, organisations must understand what their AI agents are doing before someone outside the organisation discovers it first.
AI-powered attacks are raising the stakes
While enterprises explore AI-driven productivity, attackers are also using the technology to increase the scale and sophistication of their operations.
Rajnish Gupta, MD and Country Manager at Tenable India, highlights the growing pressure on organisations to reassess their security priorities. AI is lowering the skills and costs required to conduct sophisticated attacks, allowing a broader range of threat actors to exploit vulnerabilities and expand their reach.
The consequences are visible across critical sectors. Gupta cites figures showing that India’s financial sector recorded 348,607 cyber incidents, while healthcare recorded 18,855 during the first six months of 2026.
These figures underline the importance of protecting systems that manage sensitive financial information, personal records and essential services. However, the challenge is not merely the number of attacks. It is also the speed at which attackers can adapt their methods and exploit gaps between security controls.
AI can help criminals automate reconnaissance, generate convincing messages and make fraudulent communications more persuasive. It can also help less experienced attackers undertake activities that previously demanded greater technical knowledge.
“Cyber hygiene should start at the entrance gate, using AI to detect deepfakes, fake identities and manipulated documents.” — Kedar Kulkarni, Co-founder & CEO, HyperVerge
For defenders, this means that conventional approaches built around periodic assessments and reactive responses may struggle to keep pace.
Gupta’s perspective raises an important question for enterprise leaders: are security investments addressing the vulnerabilities and attack pathways that matter most, or are organisations simply adding tools without improving their ability to prevent incidents?
Cybersecurity Awareness Month, supported by the Data Security Council of India’s #BeCyberStreetSmart theme, offers an opportunity to address this question. The idea of being street-smart digitally is rooted in practical habits: recognising warning signs, questioning unusual requests, verifying identities and acting thoughtfully before sharing information or granting access.
Yet individual vigilance must be supported by institutional preparedness. Organisations need to identify exposed assets, prioritise vulnerabilities according to business risk and ensure that defensive controls can respond to rapidly evolving threats.
Awareness remains essential, but it must be connected to the technical and operational capabilities needed to contain attacks.
Deepfakes are challenging the foundations of digital trust
The growing use of AI-generated identities and manipulated documents presents a particularly serious challenge for banks, financial technology companies and other businesses that depend on reliable identity verification.
In these environments, trust begins at the point of entry. If a fraudulent identity passes onboarding checks, the resulting account may become a vehicle for financial crime, money laundering or further attacks against connected institutions.
Kedar Kulkarni, Co-founder and CEO of HyperVerge, highlights findings from a 30-day study in which nearly 0.4% of new applications received by BFSI organisations were identified as deepfakes. At some organisations, the proportion reached 1%.
Although these percentages may appear small, their implications can be substantial when applied to large application volumes. Even a limited proportion of fraudulent applications can create significant operational costs, regulatory exposure and downstream risks.
A successful breach can also have consequences beyond the institution directly affected. Fraudulent accounts may be used to move funds, target customers or exploit relationships across the wider banking ecosystem.
India has strengthened its response through mechanisms such as the 1930 cybercrime helpline, the Indian Cyber Crime Coordination Centre’s fraud mitigation initiatives and regulatory directions issued by the Reserve Bank of India. The next challenge is translating these frameworks into consistent, everyday operational practices.
“Cybersecurity awareness can’t be seasonal. It needs to be continuous!” — Puneet Magan, Senior Director, Information Security, Cloud & Infrastructure Services
Kulkarni points to HyperVerge’s ‘Ghost in the System’ campaign, presented during the Global Fintech Fest, to illustrate how a fictional fraudster might use fake identities, deepfakes and manipulated documents to obtain loans while attempting to evade detection.
The scenario reflects a broader reality: identity fraud is becoming more sophisticated, and visual familiarity can no longer be treated as proof of authenticity.
AI-powered verification can help organisations examine whether a video originates from a genuine camera, whether a face is authentic, whether a document has been manipulated and whether the same individual has previously applied under another identity.
However, verification should not end once an account has been opened. Identity and transaction risks can change over time, making continued checks important during account modifications and high-value transactions.
Flagged applications should be escalated to human reviewers with clear explanations of the risk indicators involved. This is important not only for detecting fraud but also for preventing legitimate customers from being unfairly rejected by automated systems.
The objective is to create a layered process in which technology identifies suspicious signals, people investigate complex cases and consistent controls make it harder for fraudsters to exploit weaknesses.
For financial institutions, cyber hygiene must begin before trust is granted and continue for as long as the relationship exists.
Why awareness campaigns cannot stop in October
Technology, monitoring and identity verification can strengthen enterprise defences, but their effectiveness ultimately depends on how organisations use them.
This is where the human dimension of cybersecurity becomes critical.
Puneet Magan, Senior Director, Information Security, Cloud & Infrastructure Services, cautions against treating Cybersecurity Awareness Month as a box-ticking exercise. An organisation may conduct phishing simulations, circulate security reminders and launch internal campaigns in October, only for employees to return to old habits the following month.
Such initiatives may create short-term engagement without producing lasting behavioural change.
Cybersecurity awareness, Magan argues, must be continuous. The real work happens throughout the other 11 months, through regular training, updated policies, meaningful conversations about emerging threats and reinforcement of everyday security practices.
Employees may reuse passwords, overlook suspicious emails or approve unexpected requests not necessarily because they disregard security, but because competing responsibilities push security considerations out of their daily attention.
The answer is not simply to send more reminders. Organisations must make secure behaviour practical, relevant and consistent with the way employees work.
Training should reflect the threats employees actually encounter, from sophisticated phishing messages and impersonation attempts to fraudulent payment instructions and AI-generated content. Simulations can help identify knowledge gaps, while follow-up exercises can test whether employees have learned to recognise and respond to suspicious situations.
Leadership also has a role to play. When executives treat cybersecurity as a business responsibility rather than an isolated IT function, employees are more likely to understand its importance. Security teams, meanwhile, must ensure that policies are understandable, reporting mechanisms are accessible and incidents can be raised without unnecessary friction.
A mature security culture does not emerge from one campaign. It develops through repetition, feedback, accountability and visible commitment from leadership.
October can provide a useful starting point for measuring awareness and identifying weaknesses. It cannot substitute for a year-round programme that keeps security relevant as technologies, business processes and threats change.
From awareness to measurable resilience
The convergence of AI adoption, automated attacks and identity fraud demands a broader understanding of cyber hygiene.
For enterprise leaders, three priorities stand out.
First, organisations must establish visibility across their digital environments, including AI agents and the systems and information those agents can access. Monitoring should be accompanied by clear permissions, accountability and appropriate human oversight.
Second, security controls must reflect how attacks are evolving. Vulnerability management, identity verification and transaction monitoring need to work together, particularly in sectors where a compromised account can create wider financial or operational consequences.
Third, security awareness must become an ongoing organisational practice. Employees need regular reinforcement, practical guidance and clear processes for reporting suspicious activity. The effectiveness of these programmes should be assessed through measurable improvements rather than participation figures alone.
These priorities also need to be connected. An employee who identifies a suspicious message should be able to report it quickly. A monitoring system that detects abnormal AI behaviour should trigger an appropriate response. An identity verification tool that flags a possible deepfake should provide actionable evidence for further investigation.
Cyber resilience depends on how effectively these capabilities work together.
Ultimately, the significance of Cybersecurity Awareness Month 2026 lies not in the campaigns conducted during October, but in the habits, safeguards and governance structures that remain after the month ends.
Artificial intelligence will continue to create new opportunities for productivity, innovation and customer service. It will also give attackers new ways to exploit trust and weaknesses in digital systems.
The organisations best prepared for this reality will be those that treat security as an integral part of digital transformation, rather than an additional layer applied after deployment.
The light at the end of Black October, therefore, is not a promise that cyber threats will disappear. It is the recognition that lasting defence comes from combining intelligent technology, continuous visibility, reliable identity verification and people who understand their role in protecting the enterprise.
Cyber hygiene is no longer an annual reminder. In an AI-driven world, it is a daily test of organisational resilience.