Context

• The emergence of Mythos-class AI models marks a transition from human-assisted security analysis to autonomous cyber operations.
• These systems can identify zero-day vulnerabilities, plan attacks, and exploit weaknesses at unprecedented speed.
• For India, which operates one of the world's largest digital public infrastructure (DPI) ecosystems, this transformation presents both opportunities and significant security risks.
• Protecting critical systems now requires stronger institutions, faster technological adaptation, and strategic international cooperation.

The Growing National Security Challenge

• AI as a Strategic Technology
  • AI has evolved from a tool of economic growth into a critical national security asset.
  • Countries leading in frontier AI development possess significant advantages in cybersecurity, intelligence, and defence.
  • As advanced AI capabilities spread, they may also become accessible to hostile states, criminal organisations, and non-state actors, increasing global cyber risks.
• The Emergence of an Algorithmic Arms Race
  • Cybersecurity is increasingly becoming an algorithmic arms race.
  • Success depends on the ability to identify, exploit, and patch vulnerabilities faster than adversaries.
  • Nations unable to keep pace with technological advancements risk strategic disadvantages.

Why Mythos-Class AI Matters?

• Discovery of Zero-Day Vulnerabilities
  • A zero-day exploit is a software flaw unknown to developers and therefore unpatched.
  • Advanced AI systems can discover such vulnerabilities at a scale previously impossible for human experts.
  • By dramatically reducing the cost and time required for vulnerability discovery, these systems increase the likelihood of large-scale cyberattacks.
• Autonomous Attack Chaining
  • One of the most concerning capabilities of Mythos-class models is their ability to combine multiple low-severity vulnerabilities into a single destructive attack.
  • Vulnerabilities that may appear insignificant individually can be linked into sophisticated attack pathways capable of causing widespread disruption.
• Democratisation of Cyber Capabilities
  • Historically, advanced cyber operations were limited to governments and highly skilled experts.
  • AI significantly lowers the barrier to entry by enabling even moderately skilled users to develop functional exploits.
  • This empowers ransomware groups, hackers, and other malicious actors, expanding the range of potential threats.
• Increasing Autonomy
  • Advanced AI systems are capable of long-horizon planning, autonomous execution, and adaptive problem-solving.
  • Such capabilities raise concerns about systems operating with limited human oversight, making cyber threats more difficult to predict and control.

India's Preparedness Gap

• Strengths of India's Digital Ecosystem
  • India has built a globally recognized DPI through platforms such as UPI, Aadhaar, and the Account Aggregator framework.
  • These innovations have transformed governance, financial inclusion, and digital service delivery.
• Dependence on Legacy Systems
  • Despite these achievements, many public institutions continue to rely on legacy systems, outdated software environments, and ageing technological infrastructure.
  • Such systems are often more vulnerable to sophisticated cyberattacks and require extensive modernisation.
• Workforce and Response Challenges
  • India faces a cybersecurity workforce shortage of more than 6,00,000 professionals.
  • At the same time, many institutions operate with slow patch cycles, often taking months to address vulnerabilities.
  • This creates a dangerous mismatch between machine-speed attacks and human-speed responses.

Policy Recommendations

• Establish an India AI Safety Institute (IASI)
  • A dedicated IASI should be created to evaluate frontier AI systems, test them against Indian threat scenarios, and coordinate with international safety organisations.
  • Such an institution would strengthen domestic AI safety evaluation and risk-assessment capabilities.
• Strengthen International Cooperation
  • India should pursue a Defensive AI Quad involving the United States, the United Kingdom, and Japan.
  • This partnership could facilitate intelligence sharing, joint research, and access to advanced defensive technologies.
• Develop an AI Accountability Framework
  • A comprehensive AI accountability framework should require developers of highly capable AI systems to disclose capability assessments, risks, and known harms.
  • Such regulations would enhance transparency while promoting responsible innovation.
• Modernise Cybersecurity Infrastructure
  • The government should establish a large-scale cybersecurity upgradation fund to modernize critical infrastructure and reduce dependence on obsolete technologies.
  • Simultaneously, India should invest in sovereign defensive AI models capable of real-time monitoring, anomaly detection, and automated threat containment.
• Promote Global Governance
  • India can play a leading role in advocating international norms governing the release of advanced AI systems, particularly those possessing offensive cyber capabilities.
  • Global cooperation will be essential to manage emerging risks effectively.

Conclusion

• The challenge is no longer limited to preventing isolated cyberattacks but adapting to a world where intelligent systems can discover and exploit vulnerabilities at machine speed.
• India's future cybersecurity resilience depends on closing its preparedness gap through institutional reforms, infrastructure modernisation, international partnerships, and investment in defensive AI.
• In an era defined by rapidly evolving technological competition, preparedness is no longer optional but a strategic necessity.