Rising Cyber Threats: AI, Adaptive Attacks & India’s Cybersecurity

Subject: GS Paper 3: Science and Technology

Context: AI has achieved mass adoption faster than earlier technologies, with ChatGPT reaching a billion users in about three years, compared to around 15 years for the Internet.

• This rapid diffusion is transforming the cyber threat landscape, increasing the speed, scale and sophistication of attacks.

UPSC Course Fees Online

How is AI transforming cyber threats?

• Automation of Cyber Attacks: AI can automate several stages of the cyber kill chain, from reconnaissance and vulnerability discovery to attack execution.
  • It can analyse large volumes of information and identify potential targets much faster than humans.
• AI-enabled Social Engineering: AI can mine social media and other information to create highly targeted spear-phishing messages.
• AI-generated Adaptive Malware: LLM-generated polymorphic malware can modify and restructure itself according to the situation. 
  • This makes traditional security systems based on known malware signatures less effective.
• Autonomous Cyber Operations: Frontier AI models are increasingly capable of identifying targets, planning actions, adapting to changing conditions, and executing operations with limited human intervention. This creates the possibility of AI-orchestrated cyber campaigns.
• Automated Vulnerability Discovery: Advanced AI models can identify zero-day vulnerabilities at scale. 
  • Such vulnerabilities are particularly dangerous when they affect critical infrastructure and industrial control systems.
  • Zero-day vulnerabilities are previously unknown security flaws in software, systems, or networks that developers have not yet patched.

Why Are Traditional Cyber Defenses Becoming Inadequate?

• Traditional Antivirus: Relies heavily on recognising known malware fingerprints.
• Static Security Patches: Primarily address vulnerabilities that are already identified.
• Adaptive Threats: AI-enabled malware can continuously change its behavior and structure, making fixed defense mechanisms less effective.
• Speed Mismatch: AI can discover and exploit vulnerabilities far faster than conventional defensive systems can respond.

Emerging Shift And Significance For India

• From Reactive To Adaptive Defense: Cybersecurity is shifting from static, signature-based defense towards AI-enabled, adaptive, real-time defense, with AI enabling large-scale data analysis, real-time threat detection, and automated response.
• Strategic Significance for India: This creates a dual challenge for India — managing its high exposure to cyber threats while addressing gaps in indigenous AI capabilities. 
  • Hence, India must not only defend against AI-enabled cyberattacks but also harness AI to strengthen cyber defenses and strategic autonomy.

India’s Cybersecurity Concerns

• High Cyber Threat Exposure: India ranked 2nd globally in 2024 and 6th in 2025 among countries facing cyberattacks, according to CloudSEK.
• Threats To Critical Infrastructure: During Operation Sindoor, Pakistan-backed APT36 targeted the MoD, Armed Forces, DRDO, BOSS Linux, NIC, and government portals. 
  • The ransomware group World Leaks also claimed to have stolen data linked to the Kudankulam nuclear plant.
• AI-driven Vulnerability: Growing AI and digital integration in nuclear facilities, energy grids, chemical industries, refineries, and communication networks increases risks to Operational Technology (OT) and Industrial Control Systems (ICS), enabling faster, more adaptive attacks.
• Strategic AI Capability Gap: India lags behind the US and China in foundational AI models, GPUs, chip design and large-scale data centers.
  • This creates technological dependence at a time when AI is becoming central to both cyber offense and defense.

IAS coaching

India’s Efforts To Strengthen AI And Cybersecurity

• CERT-In Measures (Indian Computer Emergency Response Team): Strengthening AI-driven threat detection, cyber resilience, trusted AI frameworks and malware mitigation.
  • Advises organisations to minimise unnecessary internet-facing services and assume that newly discovered vulnerabilities could be exploited within hours rather than weeks.
• Governance Measures: MeitY is exploring: Consent-based safeguards for synthetically generated content, Limits on agentic AI autonomy, Clearer liability frameworks for AI models.
• NCIIPC (National Critical Information Infrastructure Protection Center): Works to protect Critical Information Infrastructure (CII) through monitoring, threat assessment and incident-response mechanisms. 
• DPDP Act, 2023: The Digital Personal Data Protection Act, 2023 strengthens safeguards for personal data processing, consent and organisational accountability in the digital and AI ecosystem. 
• Malware Mitigation: Citizen-centric initiatives to detect and mitigate malware threats. 
• Cyber Hygiene: Organisations are encouraged to remove unnecessary internet-facing services and strengthen their security architecture. 

Way Forward

• Build Indigenous AI Capabilities: Strengthen capabilities across the AI stack, including models, chips, computing infrastructure and data centers.
• Integrate AI and Cybersecurity: Treat AI for cyber defense and cybersecurity for AI as interconnected policy priorities.
• Strengthen Critical Infrastructure Security: Enhance protection of systems vulnerable to AI-enabled attacks.
• Adopt Adaptive Cyber Defense: Move beyond static security measures towards real-time threat detection and automated response.
• Strengthen Accountability: Develop appropriate security assessments, liability provisions and accountability mechanisms for AI systems.
• Secure AI Supply Chains: Increase scrutiny of the technological supply chain supporting AI infrastructure.
• Strategic Partnerships: Deepen participation in strategic technology groupings such as Pax Silica.
• Secure-by-Design Approach: Cybersecurity should be incorporated into AI systems from the design stage, rather than being added after deployment. 

Click to Know UPSC Coaching Centres in India

Conclusion

The convergence of AI and cybersecurity is creating a new strategic technology frontier, where the ability to build, secure and govern AI increasingly determines cyber resilience.

• India must therefore pursue AI-enabled cyber defense alongside cybersecurity for AI, while reducing technological dependence and strengthening the resilience of critical infrastructure. 

Check Out UPSC CSE Books

Visit PW Store