Whalesbook
AI's New Threat to Digital Infrastructure
The arrival of Anthropic's Mythos AI has dramatically changed cybersecurity for India's financial sector. Unlike older threats that require human effort, Mythos can find and exploit software bugs at unprecedented speed and scale. This transforms India's vast digital landscape from a manageable risk into a high-stakes technological race. The government's decision to run security simulations in a controlled environment is a direct response to Mythos's power to uncover hidden weaknesses in operating systems and browsers that have gone unnoticed for years.
Infosys and TCS on the Front Lines
Major tech companies like Infosys and Tata Consultancy Services are central to this defense effort. They are using Anthropic's Claude Opus 4.7 as a stand-in for the unreleased Mythos. These firms are intensely working on reviewing code and developing patches for essential systems, including the Finacle banking software. Both Infosys and TCS are currently trading at P/E multiples around 16x and 17x, respectively, which are below their 10-year averages and reflect a broader slowdown in the IT sector. However, their crucial role in strengthening national digital defenses offers a significant, though hard-to-quantify, long-term value.
Underlying Risks to India's Digitization
Despite these proactive measures, significant structural risks persist. India's rapid digital expansion, seen in programs like Aadhaar and the Unified Payments Interface (UPI), has created a deeply interconnected system where a single exploit could cause widespread failures. Regulators, including the Reserve Bank of India and CERT-In, recognize that traditional security methods are no longer sufficient. The main concern is that new, unknown exploits could appear faster than they can be fixed. Moreover, relying on U.S. AI models for defense research creates geopolitical dependence, potentially compromising India's security if access to these tools is limited.
Moving Towards Adaptive Security
The establishment of task forces and real-time threat detection systems points to a shift toward a 'Zero Trust' security model. Policymakers indicate that future security compliance will be measured by the ability to maintain operations during continuous, automated attacks, rather than by static audits. As India prioritizes digital sovereignty, it will likely focus on developing its own AI cybersecurity capabilities. This approach aims to reduce dependence on foreign AI models and ensure private sector partners integrate defensive AI throughout their software development processes.