AI’s Rapid Rise Amplifies Cyber Threats, Exposing Global Imbalances and India’s Vulnerabilities The adoption of artificial intelligence (AI) has outpaced all prior technologies, with ChatGPT reaching a billion users in just three years far faster than the internet’s 15-year timeline. This acceleration has transformed cybersecurity, enabling threats to evolve at unprecedented speed, scale, and sophistication. AI now automates every stage of the cyber kill chain, from reconnaissance to autonomous offensive operations, reshaping the balance of power in cyberspace. ### AI-Powered Threats Reshape Cyber Warfare AI’s impact on cybersecurity is profound, particularly in three key areas: 1. Automated Reconnaissance & Social Engineering – AI models like ChatGPT mine social media to craft hyper-targeted spear-phishing emails, while deepfakes generate real-time disinformation, eroding trust in digital content. 2. Polymorphic Malware & Autonomous Attacks – Large language models (LLMs) now generate and adapt malware in real time, evading traditional signature-based defenses. In September 2025, Anthropic reported that a Chinese state-backed group, GTG-1002, used its Claude Code model as an autonomous cyber agent in a multi-stage espionage campaign the first documented case of AI-orchestrated cyber operations. 3. Zero-Day Vulnerability Discovery – Frontier AI models, such as Anthropic’s Claude Mythos Preview, have autonomously identified thousands of critical zero-day flaws, including a 27-year-old vulnerability in OpenBSD, a security-hardened operating system used in firewalls and critical infrastructure. These advancements render conventional defenses like static antivirus signatures and delayed patching ineffective against AI-driven threats. Meanwhile, AI also enhances defensive capabilities, enabling real-time threat detection and automated responses, but access to these tools remains concentrated among a few nations. ### Geopolitical Imbalances Widen the AI Divide The global AI ecosystem is dominated by the U.S. and China, which control foundational models, chip design, and data-center infrastructure. This disparity leaves other nations, including India, dependent on foreign technology and vulnerable to AI-enabled cyber threats. India, the world’s second-most cyber-attacked nation in 2024 (per CloudSEK), faces escalating risks. Recent incidents include: - Kudankulam Nuclear Plant Breach – In 2025, the ransomware group World Leaks leaked blueprints and supplier data from India’s largest nuclear facility. - Operation Sindoor – Pakistan-backed APT36 targeted India’s defense sector, including the Ministry of Defence, DRDO, and Bharat Operating System Solutions (BOSS) Linux, while disrupting government IT infrastructure like the National Informatics Centre. Despite these threats, India’s indigenous AI capabilities lag behind, with gaps in foundational models, GPUs, and large-scale data infrastructure. ### India’s Response: Policy Shifts and Defensive Measures Recognizing the urgency, Indian authorities have begun adapting: - CERT-In’s AI-Driven Defenses – Since 2025, India’s cybersecurity agency has deployed AI-based threat detection and issued advisories urging organizations to treat vulnerabilities as exploitable within hours, not weeks. - Regulatory Frameworks – The Ministry of Electronics and Information Technology is exploring consent-based rules for synthetic content, restrictions on autonomous AI agents, and liability frameworks for AI models. - Strategic Adoption – Analysts advocate for "agile adoption" of AI, supply-chain scrutiny, and participation in global tech alliances like Pax Silica to secure India’s digital sovereignty. As AI and cybersecurity become inseparable, policymakers must integrate them into a unified strategy balancing defense, innovation, and geopolitical resilience. The stakes are clear: nations that fail to adapt risk falling further behind in an AI-driven cyber arms race.