India Requires Companies to Patch Critical Flaws Within 12 Hours as AI Threats Rise

Generative AI and automation tools are sharply reducing the time hackers need to conduct reconnaissance, write malware and exploit vulnerabilities, leaving companies’ weekly or monthly patching cycles unable to respond quickly enough. The Indian Computer Emergency Response Team (CERT-In) has therefore strengthened its cybersecurity guidance in an effort to reduce the risk of autonomous attacks on critical infrastructure and businesses.

According to the latest developments covered in the June 1–5 cybersecurity weekly report, CERT-In requires companies and organizations to patch critical vulnerabilities within 12 hours of disclosure, significantly shortening previous response timelines. The new guidance also calls for zero-trust architecture, multi-factor authentication and continuous monitoring to counter the rapid spread of AI-assisted attacks. No financial amount was involved.