India’s securities regulator warns of AI-driven cyberattack risks

India's Securities and Exchange Board has advised participants in the nation’s equities industry to immediately revisit their information security systems and practices due to concerns that AI tools like Anthropic's Mythos could facilitate cyberattacks. The advisory highlights the potential for these advanced AI tools to identify and exploit vulnerabilities with unprecedented speed and scale, introducing new dimensions of risk for regulated entities. This proactive measure aims to bolster defenses against emerging threats in the financial sector, based on information published by The Register.

The Indian regulator's advisory specifically addresses the risks posed by AI-driven vulnerability identification tools, such as Claude Mythos. These tools can accelerate the discovery and exploitation of existing weaknesses, potentially leading to heightened risk exposure for financial entities. Concerns also extend to data confidentiality, application integrity, and the reliability of AI-generated outputs. In response, the Board has established a taskforce to examine these risks, share threat intelligence, and review cybersecurity practices, including those of third-party vendors.

The advisory recommends immediate actions such as updating patches, conducting vulnerability audits, securing APIs, enhancing security operations centers (SOCs), and implementing zero-trust principles. It also directs IT committees to develop AI risk mitigation strategies and integrate AI into their own cybersecurity frameworks. This alert targets 19 classes of companies, including stock exchanges, mutual funds, and data storage agencies, reflecting a global trend of increased regulatory scrutiny on AI's cybersecurity implications.

Source: The Register