Overview
- CERT-In released a 38-page blueprint on Monday that asks organisations to contain or remediate known exploited internet-facing and 'crown-jewel' vulnerabilities within 12 hours where feasible.
- The guidance also sets risk-based windows of one day for critical externally exposed flaws, three days for critical internal flaws on high-value systems, and five days for other high-severity issues.
- CERT-In says generative AI, large language models and autonomous agents speed reconnaissance, exploit development and phishing by automating scanning and code generation, which compresses defenders' response time.
- Where fixes are not available the blueprint prescribes interim mitigations such as isolation, access restrictions, web-application firewalls, enhanced monitoring and continued six-hour incident reporting to CERT-In.
- The guidance is an operational expectation rather than a binding rule, it urges phased rollout and layered controls including Zero Trust, SBOM/AIBOM tracking and red teaming, and it will likely strain SOCs and supply‑chain teams as organisations speed up patching and governance.