US and SBP Launch New Banking Network and Data Centre
November 7, 2026
National CERT warns AI-powered attacks could hit banks and critical infrastructure, even altering balances customers see, and urges MFA, monitoring and tighter security.
Imagine opening your banking app and seeing a balance that is not real. That is one of the scenarios Pakistan’s National Cyber Emergency Response Team (National CERT) has just warned about, PhoneWorld reported. In a new advisory, the agency cautioned that AI-powered attacks could target banks, financial institutions and critical national infrastructure.
According to the advisory, cybercriminals could use AI to automate attacks, find weak spots in systems and launch coordinated operations. Core banking systems, digital banking platforms and online payment services are flagged as particularly exposed.
One scenario stands out: attackers could manipulate the account balances shown to customers, creating confusion and spreading panic about whether the financial system can be trusted. Pakistan Times adds that the advisory also highlighted risks to banking APIs, payment systems and customer-facing apps.
The agency listed warning signs for banks to watch, including a rise in automated login attempts, unusual financial transactions and suspicious API activity. It recommended multi-factor authentication and stronger protection for banking systems.
The warning goes well beyond finance. Oil and gas facilities, power plants, water supply networks and industrial systems are also at risk because they increasingly depend on connected technology and automated controls.
National CERT advised operators to secure their Internet of Things devices and industrial control systems and to restrict unnecessary remote access that could give attackers a way in.
This is not the first alarm this year. In March, National CERT warned that hostile actors could exploit supply chains to infiltrate critical infrastructure, including banking and power systems. Pakistan’s CERT chief has also said the country recorded 253 cyberattacks in 2026 at the time of his remarks, according to Business Recorder.
The same report noted that the State Bank of Pakistan is urging banks to adopt zero trust architecture. Earlier, a PTA report described a wave of AI-powered, identity-driven attacks targeting telecom and government systems.
National CERT has urged all organisations to improve monitoring, security controls and emergency response so that suspicious activity is caught before attackers can cause serious damage.
As cybercriminals adopt AI, the advisory leaves financial institutions and infrastructure operators with a clear message: review existing defences now, because the next attack may be faster and more convincing than the last.
