OPINION | India's Next Cyber Threat Won't Be Hacked. It Will Be Engineered: How Prepared Are We?
For most of the last decade, India's cybersecurity conversation has stayed within familiar territory. Phishing scams, ransomware locking hospital systems, data breaches are all real, ongoing problems, and the security ecosystem has at least developed a working vocabulary for responding to them. What is taking shape now sits in a different category entirely.
It is not about extracting data or demanding ransom. It is about engineering failure directly into the systems that keep a modern society running.
From Opportunistic Attacks to Engineered Disruption
The difference between the two is not just technical. A ransomware attack finds a gap, exploits it, and makes its presence known immediately. An engineered systemic attack works differently. It embeds itself quietly, often into firmware, supply chain components, or industrial control environments, and it waits. There is no ransom note. The goal is disruption, timed for maximum operational damage.
India's digitization drive has created exactly the kind of interconnected environment where this becomes dangerous. Smart city deployments, 5G networks, IoT devices spread across energy grids, water systems, transport networks, and factory floors were built to be connected and efficient. Most were not built to withstand an adversary who has months or years to study them before acting.
The convergence of operational technology with information technology makes this worse. Industrial control systems and SCADA........
