Cybersecurity Challenges from Advanced AI

Summary of Key Points

Regulatory Concerns:

• Advanced AI systems like Anthropic's Mythos can exploit software vulnerabilities and plan attacks, raising regulatory concerns.
• Indian Computer Emergency Response Team (CERT-In) issued an advisory on cyber risks associated with advanced AI, emphasizing the need for enhanced cybersecurity measures.

Cybersecurity Statistics:

• According to the 2026 Global Threat Report by CrowdStrike, AI-enabled attacks increased by 89% in 2025 compared to 2024.

Challenges in Cybersecurity:

• Smaller entities, especially cooperative banks, lag in cybersecurity maturity due to resource constraints.
• In 2025, cyber fraud led to a loss of Rs 11.5 crore from Himachal Co-operative Bank due to inadequate security measures.

Government Response Recommendations:

1. Enhancing Security for Smaller Entities:

   • The government should improve security capabilities of smaller entities in critical sectors (e.g., banking, telecom).
   • Formation of a corpus fund to support cybersecurity enhancement for resource-constrained banks, coupled with a trusted vendor list for procurement, is recommended.

2. Review of Regulations:

   • Existing and proposed laws, such as the Draft Digital Competition Bill, should not inadvertently weaken cybersecurity.
   • The Bill’s provisions could facilitate malicious applications, necessitating a careful review to avoid creating new vulnerabilities.

3. Avoiding Over-regulation of AI:

   • Calls for restraint against broad restrictions on access to advanced AI systems are urged. Restrictions may not prevent bad actors from exploiting vulnerabilities, leading to counterproductive outcomes.

Cybersecurity Strategy:

• A shift towards a systems-level approach in national cybersecurity planning is vital. This involves recognizing and addressing interconnected vulnerabilities across digital systems, rather than treating them as isolated issues.

Constitutional References:

• While the article does not specifically cite constitutional articles, the overall governance and regulatory frameworks relevant to cybersecurity fall under statutory regulations and national policies aimed at ensuring public safety and infrastructure security.

Government Policies and Schemes:

• Limited mention of specific government schemes; however, the need for financial support and trusted implementation pathways indicates a push for policy and funding initiatives.

International Context:

• The rise of AI-related cyber threats is a global issue, reflecting the need for coordinated international efforts to tackle cybersecurity challenges.

Conclusion

India faces significant challenges in cybersecurity as advanced AI capabilities grow. To manage these risks effectively, a multi-faceted approach involving resource allocation for smaller entities, regulatory review, and a focus on interconnected vulnerabilities is crucial. Addressing these issues is essential for safeguarding critical infrastructure and maintaining cybersecurity resilience in the face of evolving threats.