AI governance needs better implementation, not more regulation
Anthropic’s Mythos has put regulators on high alert. Mythos can identify security vulnerabilities in software systems, help plan attacks against them, and simulate how such attacks could unfold — abilities once limited to a small group of highly skilled humans. The advancement of such AI capabilities heightens the risk of bad actors using them to scale attacks on businesses, institutions, and critical infrastructure.
The Indian Computer Emergency Response Team (CERT-In) has since issued an advisory on the cyber risks posed by advanced AI systems, acknowledging the criticality of keeping pace with frontier AI cyber capabilities and recommending the reinforcement of baseline cybersecurity measures. The RBI is also discussing with banks the risk posed by such systems. The regulatory alarm should perhaps have come earlier. A 2026 Global Threat Report by cybersecurity firm CrowdStrike indicates that AI-enabled bad actors increased attacks by 89 per cent in 2025 over the previous year. Nonetheless, authorities in India should see this as an opportunity to bolster cyber resilience across the board. The question is: How should they go about it?
First, the government must shore up the security capabilities of smaller entities in critical sectors. While it seems that the government is........
