CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

CERT-In issued guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where feasible. The guidance links faster patching to the risk of threat actors using AI tools and large language models to automate vulnerability discovery and exploitation. AI-assisted exploitation can reduce the time needed to identify, weaponize, and exploit weaknesses in exposed services, weak identities, insecure APIs, and misconfigured systems. AI can also support attack surface discovery, exploit analysis, phishing content creation, and malware generation, compressing preparation timelines and bypassing traditional controls. AI-enabled systems can be targeted through prompt injection, data leakage, jailbreaking, model manipulation, training data poisoning, model theft, and orchestration pipeline compromises. Organizations are advised to expect collapsed exploitation timelines and more autonomous attacks, requiring continuous threat assessment, proactive exposure reduction, and operational preparedness.

"“AI-assisted cyber exploitation reduces the time required for adversaries to identify, weaponize, and exploit vulnerabilities, exposed services, weak identities, insecure APIs, and misconfigured systems,” CERT-In said in a 38-page blueprint published Monday."

"“As organizations become increasingly dependent on interconnected digital infrastructure, cloud ecosystems, software supply chains, operational technologies, and AI-enabled platforms, the potential impact of AI-enabled cyber threats continues to increase across sectors.”"

"“With threat actors beginning to increasingly rely on AI for a wide range of tasks, including attack surface discovery, exploit analysis, convincing phishing content, and even malware generation, they can significantly compress attack preparation timelines and bypass traditional security controls.”"

"“Furthermore, AI-enabled systems may themselves become targets of malicious attacks via prompt injections, data leakage vulnerabilities, jailbreaking techniques, model manipulation, training data poisoning, model theft, and orchestration pipeline compromises, effectively undermining their confidentiality and integrity.”"

Read at The Hacker News