AI raises cybersecurity risks: Why companies need better monitoring and faster threat detection

Akshay Garkel of Grant Thornton Bharat and Kunal Pande of KPMG India explain how AI is raising cybersecurity risks and why companies need stronger monitoring and faster threat detection.

Companies will need to strengthen cybersecurity controls, improve monitoring and respond faster to potential threats as artificial intelligence (AI) makes it easier to identify and exploit software vulnerabilities, according to experts from Grant Thornton Bharat and KPMG in India.

The comments come amid concerns over a certificate-related security incident at eMudhra. The company said its global website certificate business was affected, while its India-regulated digital signature certificate and e-sign businesses remained unaffected.

AI is changing the cybersecurity landscape by making it easier to identify flaws across complex software systems. It can also help connect vulnerabilities that may not appear related, increasing the chances of a security compromise.

Kunal Pande, National Leader - Cyber, Risk and Compliance Services at KPMG in India said, "What is needed for an organisation is to make sure that the process and the capability to make sure that such flaws are first of all prevented, is really taken to a better level, wherein more automation and tech capabilities also are brought in. As well as there are capabilities built in that in case something is detected, it is contained and rectified at the earliest possible."

This will require greater use of automation, technology-led monitoring and stronger governance frameworks. While preventive controls can reduce the likelihood of an attack, detective controls can help identify unusual activity and limit the damage if a breach occurs.

Even a single weakness in an organisation's software, processes or people-related controls can create an opportunity for attackers. Companies will therefore need to review their security frameworks regularly rather than rely solely on existing safeguards.

Digital certificates help browsers verify the identity of websites and establish trust between users and the sites they visit. If these certificates are compromised, attackers could potentially use fake certificates to impersonate legitimate websites or intercept communications through man-in-the-middle attacks.

Discussing the eMudhra incident, Garkel said the issue pointed to a failure in processes and controls. However, it was not yet clear whether the incident had resulted in a data breach or hacking.

The episode highlights the importance of regularly reviewing certificate management processes, identifying security gaps and taking prompt action when a vulnerability is detected. Removing affected certificates from use can also help reduce the risk of misuse.

For businesses that rely on digital certificates to establish trust with customers, continuous monitoring and timely remediation will remain important.

Discussing reports of a possible data leak involving State Bank of India, Garkel said investigations were under way and stressed the need for organisations to stay ahead of attackers.

Companies should monitor activity on the dark web and deep web to identify possible signs of data exposure. They must also strengthen safeguards around personally identifiable information and pay close attention to customer privacy as obligations under India's Digital Personal Data Protection Act become increasingly important.

Garkel warned that cyber threats are evolving rapidly, with attackers increasingly using automated tools to execute attacks at greater speed. He said, "this problem is here to stay".

He also pointed to the potential impact of quantum computing on the pace of cyberattacks, highlighting the need for organisations to prepare for threats that could emerge and develop much faster.

While companies must invest in stronger technology and security systems, consumers also have a role to play in reducing cyber risks. Customers should pay attention to official security communications, avoid suspicious links and exercise caution when visiting websites that may have been compromised.

Pande said organisations and institutions must communicate potential threats clearly so that customers understand what action to take. He stressed the importance of making cybersecurity awareness part of everyday digital behaviour.

"Education of customers is important," Pande said.