AI–CYBER SECURITY NEXUS: NAVIGATING THE DOUBLE HELIX OF THREATS

Why In News?

The global cyber landscape shifts from static Generative AI toward Agentic AI, creating a "double helix" of security risks that bypasses traditional Zero Trust protocols.

What is the AI–Cyber Nexus?

The Double Helix Concept: AI acts as a force multiplier for both cyber defence and cyber offence by enabling autonomous threat detection, malware evolution and machine-speed attacks, while also lowering entry barriers for cybercriminals.

AI in Cybersecurity: AI automates threat intelligence, malware analysis, vulnerability assessment, code auditing and Security Operations Centre (SOC) functions. 

Novel Vulnerabilities: AI systems are susceptible to prompt injection, data poisoning, model inversion, hallucinations, sensitive information disclosure and supply-chain attacks. 

Autonomous AI Agents: Unlike Generative AI, Agentic AI can independently plan, execute and coordinate multi-step tasks, making compromise of a single agent capable of cascading across connected systems. 

Dual-Use Technology: The same AI tools that strengthen cyber defence can also be weaponised for malware generation, automated reconnaissance, phishing and cyber espionage, requiring a risk-based governance approach. 

 

Why is AI Becoming a Cybersecurity Challenge?

AI-Enabled Cyberattacks: Attackers deploy adaptive and AI-assisted malware capable of evading traditional signature-based detection, necessitating behavioural and AI-driven defence mechanisms.  

Prompt Injection & Agent Hijacking: Agentic AI systems can be manipulated through indirect prompt injection, causing autonomous execution of malicious actions. 

Deepfakes & Synthetic Media: AI-generated audio, images and videos fuel misinformation, election manipulation and the "liar's dividend", undermining trust in democratic institutions and public discourse.

AI-Powered Malware: LLM-based tools can automate malware development, exploit generation, vulnerability discovery and reconnaissance, substantially reducing the technical expertise required for cyberattacks.

Automated Phishing: LLMs enable highly personalised spear-phishing, smishing and business email compromise (BEC) attacks at unprecedented scale and speed.

Critical Infrastructure Risks: AI accelerates reconnaissance of power grids, telecom networks, financial systems, healthcare and nuclear facilities, increasing risks to Critical Information Infrastructure (CII). 

• The Kudankulam Nuclear Power Plant malware incident (2019) demonstrated that even strategically sensitive systems require continuous cyber resilience.

Data Poisoning & Model Manipulation: Adversaries can corrupt training datasets or embed hidden backdoors, compromising AI model reliability in safety-critical sectors.

Supply Chain Attacks: AI ecosystems depend on third-party datasets, open-source models and plugins, increasing exposure to software supply-chain vulnerabilities.

How is AI Strengthening Cyber Defence?

Threat Detection: AI-powered Security Information and Event Management (SIEM) and Extended Detection & Response (XDR) platforms detect behavioural anomalies, malware and deepfakes in real time. 

Predictive Intelligence: Cyber Threat Intelligence (CTI) systems analyse global threat feeds, dark-web activity and Indicators of Compromise (IoCs) to predict attacks.  

Automated Response: AI enables machine-speed incident response through Security Orchestration, Automation and Response (SOAR), automatically isolating infected systems and containing attacks. 

Vulnerability Assessment: AI tools automate penetration testing, code review and firmware analysis to identify vulnerabilities before exploitation.

Cyber Threat Hunting: AI generates adaptive honeypots, deception networks and behavioural analytics to identify Advanced Persistent Threats (APTs). 

Emerging Security Threats

Hybrid Warfare: AI is integrated into cyber operations, electronic warfare, drone swarms and information operations. 

• World Economic Forum's Global Cybersecurity Outlook 2025 identifies geopolitical tensions as a major driver of cyber risk, while India's Operation Sindoor demonstrated integrated cyber-electronic capabilities.

Ransomware: AI enables faster malware generation, phishing and ransomware campaigns. WEF Global Cybersecurity Outlook 2026 identifies ransomware as one of the top concerns due to its operational impact.

Supply Chain Attacks: Compromised software libraries and third-party vendors have become major attack vectors. 54% of large organisations identify supply-chain vulnerabilities as the biggest barrier to cyber resilience. (Source: WEF).

Autonomous AI Cyber Weapons: Autonomous AI agents may discover and exploit vulnerabilities at machine speed if inadequately governed. 

Information Warfare: State and non-state actors increasingly use AI-generated deepfakes, bot networks and algorithmic amplification to spread disinformation and influence public opinion. 

• WEF Global Cybersecurity Outlook 2025 identifies AI-enabled misinformation and social engineering as rapidly growing threats.

AI-Enabled Social Engineering: Generative AI has made phishing, voice cloning and Business Email Compromise (BEC) more convincing and scalable. 

• Nearly 47% of organisations cite GenAI-powered adversarial advances as their primary cyber concern. (Source: WEF).

Cyber Skills Gap: Shortage of skilled cybersecurity professionals weakens organisational resilience. Only 14% of organisations are confident they have adequate cyber talent, while the cyber skills gap increased by 8% in 2024. (Source: WEF).

Challenges for India

Workforce Gap: India faces nearly a 30% cybersecurity workforce gap and requires around 1.5 million cybersecurity professionals to meet growing demand (Source: Carnegie)

Regulatory Deficit: While the Digital Personal Data Protection (DPDP) Act, 2023 provides a privacy framework, India still lacks a comprehensive AI governance law covering algorithmic accountability, deepfakes and AI liability. 

• The Global Partnership on AI (GPAI) and UNESCO Recommendation on the Ethics of AI (2021) advocate risk-based, human-centric AI regulation.

Cross-Border Cybercrime: India ranks 10th on the Oxford Cybercrime Index (2024), highlighting challenges in tackling cybercriminals operating from foreign jurisdictions and the need for stronger international legal cooperation.

Infrastructure Vulnerability: Legacy systems in power, water, transport and other critical infrastructure often lack Secure-by-Design and Zero Trust Architecture. 

• MeitY's National Consultative Workshop on Strengthening Cyber Security Frameworks for State Data (2026) recommends modernisation of legacy systems, continuous monitoring and Zero Trust implementation.

Limited Private Sector Innovation: India's cybersecurity ecosystem has relatively limited indigenous product development and technology commercialisation. 

• Parliament's Standing Committee on MeitY has highlighted the need to strengthen domestic electronics, semiconductor and cybersecurity innovation ecosystems. 

Cyber Awareness Deficit: Low cyber hygiene among citizens, MSMEs and government employees increases vulnerability to phishing, ransomware and financial fraud. 

• The Standing Committee on the Empowerment of Women (2026) recommended standardised cyber awareness and capacity-building programmes across states.

Semiconductor Dependence: India's cyber resilience is constrained by dependence on imported chips despite rapid progress under the India Semiconductor Mission. India already employs nearly 20% of the global semiconductor chip design workforce, but domestic manufacturing capacity is still evolving (Source: PIB)

Way Forward

Responsible AI Framework: Establish an independent AI Safety & Ethics Commission to develop socio-techno-legal standards for trustworthy AI, drawing on UNESCO's Recommendation on the Ethics of AI and the OECD AI Principles.

Zero Trust 2.0: Transition from perimeter-based security to AI-driven Zero Trust Architecture, continuous authentication and behavioural analytics, as recommended by MeitY's 2026 cybersecurity framework. 

Strengthen Cyber Laws: Complement the DPDP Act, 2023 with a dedicated AI governance framework, updated cybercrime laws and stronger critical infrastructure protection standards.

Public-Private Partnerships (PPP): Integrate deep-tech startups through Cyber Security Grand Challenges, regulatory sandboxes, Defence iDEX and IndiaAI Mission, enabling faster innovation and indigenous security solutions.

International Cooperation: Strengthen collaboration under the Quad Cybersecurity Partnership, Budapest Convention-compatible cooperation mechanisms, CERT-to-CERT coordination and information sharing to combat cross-border cybercrime.

Capacity Building: Expand the Electronics and ICT Academies Programme, establish dedicated cyber ranges and strengthen Cyber Shikshaa, while addressing the 1.5 million cybersecurity workforce requirement through industry-academia collaboration. 

Critical Infrastructure Security: Mandate Secure-by-Design, periodic security audits, Security Operations Centres (SOCs) and sectoral CSIRTs for power, telecom, finance and healthcare, in line with MeitY's 2026 recommendations.

Indigenisation: Accelerate the India Semiconductor Mission, trusted hardware ecosystem and indigenous cybersecurity products. 

• The Modified Programme for Development of Semiconductor and Display Manufacturing Ecosystem aims to strengthen fabrication, packaging and chip design capabilities 

Institutional Reforms: Strengthen CERT-In, NCIIPC, I4C and sectoral cyber coordination mechanisms, while implementing recommendations of Parliamentary Committees for better cyber investigation, forensic capacity and skilled manpower.

Conclusion

To secure technological sovereignty, India must transition from passive defense to proactive, machine-speed deterrence. By integrating sovereign hardware, dynamic Zero Trust architectures, and robust public-private partnerships, India can effectively navigate the complexities of intelligent warfare.

Source:  THEHINDU