#FactCheck: Digitally Manipulated Video of Salman Khan, Rahul Gandhi, and Vijay

Introduction

‍

Cyberwarfare has evolved into one of the most decisive instruments of statecraft and conflict. The increasing digitisation of critical infrastructure like power grids, water systems, transportation systems, healthcare networks, and energy sources has made these systems new targets in the war of algorithms. Military logic is evolving to paralyse the nation’s critical infrastructure to keep its resources engaged in repairing them and thereby break the nation’s ability to deter and counter attacks, all without firing a single bullet. 

‍

From Ransomware to an Invisible Sabotage: The changing nature of warfare

‍

The operational technology (OT) landscape has become the epicentre of cyber operations, all around the world. Once, which was insulated, related to industrial systems that controlled turbines, pipelines, or dams, they now stand connected to the Internet through supervisory control and data acquisition (SCADA) and the Internet of Things. These connections have also become gateways for attackers, besides enhancing the efficiency of the infrastructural lifelines of the nation.   

Groups like Volt Typhoon, Sandworm, Laurionite, and Cyberavengers have transformed the art of digital infiltration into a strategic shift. Volt Typhoon, which is linked to China, has used “living-off-the-land” techniques to exploit the legitimate administrative tools to remain invisible while scanning the critical infrastructures in the US. Sandworm, which is aligned with Russia’s GRU (Glavnoye Razvedyvatelnoye Upravlenie) or Main Intelligence Directorate (in English), has demonstrated the power of cyber sabotage in real time, as its attacks on Ukraine’s power grids in 2015 and 2021 had left millions in darkness, coinciding with kinetic missile strikes. Meanwhile, the Iranian-affiliated Cyberavengers group, which has weaponised the AI-assisted malware, such as IOCONTROL, that are capable of hijacking water and energy control systems. Each of these systems used in these operations reflects a shift from direct espionage activities to a state of strategic paralysis. 

In comparison to the traditional cybercrime activities that are aimed at stealing data and extortion of money, these campaigns repeatedly target the physical systems, which consist of the machinery that sustains civilian life and military preparedness.  

‍

The Military Logic behind Cyber Targeting: A Web of Vulnerabilities 

‍

A critical infrastructure is a complex ecosystem that covers power generation, transportation, communication, and manufacturing are all interconnected, which means a single compromised node can cascade into a national paralysis. For instance, a breach in the systems of the dam can flood an entire city, a grid shutdown can halt water supply to hospitals, and even affect air traffic. The 2015 Black Energy Malware attack in Ukraine has proved this possibility when three utilities were hacked, plunging thousands of homes into darkness. The Iranian hackers once again gained access to the Bowman Avenue Dam of New York and controlled its floodgates, which gave a chilling demonstration of the destructive reality of digital manipulation. 

‍

The systems remain vulnerable mainly for 3 reasons such as- 

‍

• Legacy Architectures: Many of these industrial systems were designed decades ago with no built-in cybersecurity mechanisms. 
• Slow Patching and Segmentation Gaps: All updates and segmentation between IT and TO networks often lag, providing open entry points for attackers. 
• Converging with IoT: The integration of smart sensors and cloud-based management tools has expanded the attack surface exponentially. 

‍

This interconnected fragility has turned our critical infrastructures into both a weapon and a target or a tool for coercion in modern hybrid warfare. Between 2023 and 2024, over 420 cyberattacks were witnessed in several critical global infrastructures, which averaged to 13 attacks per second, according to a news report. These were not just random acts of digital vandalism; they were deliberate and coordinated operational attempts by state-led actors from China, Russia, and Iran. 

‍

Developing a new Resilience as the new tool of Deterrence 

‍

Cyber deterrence no longer rests on the fear of retaliation, it relies on the need for resilience. Nations that can absorb attacks, maintain continuity, and recover rapidly would be the true superpowers of this digital age. Segmentation, real-time threat detection, and AI-assisted recovery models are vital pillars of this model of resilience. The logic of modern cyberwarfare is clear, which means that the more a nation digitizes, the more it will need to defend itself. 

However, as the line between war and peace blurs, safeguarding critical infrastructure is no longer just an IT priority; rather, it is a national security doctrine. In this silent theatre of cyberwarfare, survival will depend not only on firepower, but on firewalls. 

‍

References

‍

• https://rmcglobal.com/critical-infrastructure-under-siege-the-top-ot-threats-of-2025/
• https://ccdcoe.org/uploads/2018/10/Geers2009_The-Cyber-Threat-to-National-Critical-Infrastructures.pdf
• https://www.researchgate.net/publication/335752979_Cybersecurity_of_Critical_Infrastructure 
• https://arxiv.org/html/2510.04118v1 ‍
• https://www.anapaya.net/blog/top-5-critical-infrastructure-cyberattacks

The UN established its first permanent Global Mechanism for cybersecurity which will begin operations in March 2026. The policy framework for Western countries exists because their current strategies are being developed. The situation in India presents greater complexity and higher levels of interest than any other country.

‍

The Fence That Became a Vantage Point
‍

The United Nations cybersecurity talks have seen India actively participate since their start. India brought its proposal for an open and inclusive multilateral framework which was supported by Western states who wanted to establish universal norms and responsible state behaviour but India did not accept their geopolitical viewpoint.

India did not support the Russia-led bloc which wanted a permanent open-ended working group that would focus only on plenary meetings and the country also rejected the European Union's Program of Action. India maintained its previous stance by supporting multilateralism as a general principle while showing hesitation about backing specific power structures.

The fence now provides an advantage because it no longer serves as a point of vulnerability. India's non-alignment provides him with operational power because the body operates through decision-making which requires all members to agree.

‍

Sovereignty First, Norms Second
‍

The digital sovereignty framework which defines India's long-standing cybersecurity diplomatic activities serves as the country's fundamental cybersecurity diplomatic framework. New Delhi has been reluctant to endorse frameworks that could constrain how it manages its own cyberspace, whether through content regulation, surveillance architecture, or incident response. The Indian government establishes its control over internet governance through its implementation of VPN regulations and CERT-In reporting requirements and data localization discussions. 

The new Global Mechanism creates a situation which India must handle because it creates an uncommon diplomatic situation. The framework's five pillars, threats, norms, international law, confidence-building measures, and capacity-building, each carry embedded assumptions that don't sit neatly with India's domestic policy posture. India supports the norm which prohibits countries from attacking each other's critical infrastructure while developing offensive cyber abilities and keeping its cyber response strategies secret.

‍

The Capacity-Building Opening
‍

The Indian government has a definite interest in dedicated thematic group 2 which focuses on building cybersecurity capacity. India exists in two opposing states because it operates as a developing nation which lacks basic national cybersecurity systems while also maintaining advanced cyber defense capabilities. The donor table exists as a platform which gives India both funding rights and complete rights to speak for developing nations. India should serve as a connecting force for DTG 2 by sharing its experience with CERT-In development and its sectoral frameworks for finance and telecom and its National Cyber Coordination Centre programs which train cybersecurity professionals while requesting capacity-building programs that follow demand-based needs assessment and local context understanding and which do not include the typical restrictions that accompany Western technical assistance.

India has done this before in other multilateral settings. The organization maintains its independence through its role as a credible Global South representative which it uses to speak for the Global South without aligning with any particular alliance.

‍

The DTG 1 Question: Critical Infrastructure and Strategic Ambiguity
‍

The DTG 1 study about ICT security challenges shows how resilience and cooperation and stability work together as different themes but creates complex challenges for India.

The 2020 Mumbai power grid incident which some researchers attribute to Chinese state-linked actors has become one of three major attacks against India's critical infrastructure together with AIIMS Delhi incidents in 2022 and ongoing cyber intrusions into defence and government networks. The international standards which govern critical infrastructure protection require actual implementation from India because the country possesses vital national assets.

India has not yet established formal processes for cyberattack attribution while its officials avoid the norm-enforcement diplomacy which Western countries practice through their coordinated attribution and sanction procedures. 

India must either develop deeper transparency about its operations or create specialized operational plans which can keep its needed information undercover if it wants to participate in DTG 1 about cross-border interdependencies and incident response collaboration. India will likely engage selectively, supporting the idea of critical infrastructure norms while resisting mechanisms that operationalise accountability.

‍

Geopolitical Triangulation
‍

The new Global Mechanism needs countries to implement their national policies because states must stop merely restating their positions. Multilateral cybersecurity forums operate as Geopolitical triangulation platforms for India. India's security system must protect its interests against its two main cyber adversaries which include China and Pakistan-based groups. 

The US and EU strategic partnership between India and these Western governments requires India to show closer ties with democratic nations through its participation in international forums. The new Global Mechanism will require India to pursue its current position by participating in capacity-building activities while developing common norms through its work on general norms language. 

India will maintain its current position between Western liberal order enforcement and Russia-China sovereignty-maximalist counter-narrative through its capacity-building activities and general norms language work.

‍

What India Should Actually Do
‍

The document establishes core argument which states early DTG development needs to be established for proper assessment of future results which applies to Indian territory and European territory. India has the credibility and technical foundation and diplomatic ties which enable it to establish itself as an agenda-setter who takes proactive actions instead of following others. India should take the following actions to achieve its goals: lead or co-lead DTG 2 discussions which focus on the capacity requirements of the Global South while advancing DG 1 areas that protect developing nations from actual threats and establish South-South cybersecurity agreements through this system which will help them bypass Western capacity development restrictions. The Global Mechanism offers an essential multilateral platform which provides advantages to countries that take initial actions. India has the ability to make an impact because it possesses strategic advantages which will be activated through its choice between active participation and total disengagement.

‍

References
‍

• http://interface-eu.org/publications/the-new-united-nations-mechanism-on-cybersecurity#a-european-strategy-for-the-dtgs
• https://disarmament.unoda.org/en/our-work/emerging-challenges/developments-field-information-and-telecommunications-context
• https://www.recordedfuture.com/research/redecho-targeting-indian-power-sector
• https://www.saikrishnaassociates.com/cert-in-issues-directions-for-information-security-practices-procedure-prevention-response-and-reporting-of-cyber-incidents/

‍

Introduction

In recent times the evolution of cyber laws has picked up momentum, primarily because of new and emerging technologies. However, just as with any other law, the same is also strengthened and substantiated by judicial precedents and judgements. Recently Delhi High Court has heard a matter between Tata Sky and Linkedin, where the court has asked them to present their Chief Grievance Officer details and SoP per the intermediary guidelines 2021.

Furthermore, in another news, officials from RBI and Meity have been summoned by the Parliamentary Standing Committee in order to address the rising issues of cyber securities and cybercrimes in India. This comes on the very first day of the monsoon session of the parliament this year. As we move towards the aspects of digital India, addressing these concerns are of utmost importance to safeguard the Indian Netizen.

The Issue

Tata Sky changed its name to Tata Play last year and has since then made its advent in the OTT sector as well. As the rebranding took place, the company was very cautious of anyone using the name Tata Sky in a bad light. Tata Play found that a lot of people on Linkedin had posted their work experience in Tata Sky for multiple years, as any new recruiter cannot verify the same. This poses a misappropriation of the brand’s name. This issue was reported to Linkedin multiple times by officials of Tata Play, but no significant action was seen. This led to an issue between the two brands; hence, a matter has been filed in front of the Hon’ble Delhi High Court to address the issue. The court has taken due cognisance of the issue, and hence in accordance with the Intermediary Guidelines 2021, the court has directed Linkedlin to provide the details of their Cheif Grievance Officer in the public domain and also to share the SoP for the redressal of issues and grievances. The guidelines made it mandatory for all intermediaries to set up a dedicated office in India and appoint a Chief Grievance Officer responsible for effective and efficient redressal of the platform-related offences and grievances within the stipulated period.

The job platform has also been ordered to share the SoPs and the various requirements and safety checks for users to create profiles over Linkedin. The policy of Linkedin is focused towards the users as well as the companies existing on the platform in order to create a synergy between the two.

RBI and Meity Official at Praliament

As we go deeper into cyberspace, especially after the pandemic, we have seen an exponential rise in cybercrimes. Based on statistics, 4 out of 10 people have been victims of cybercrimes in 2022-23, and it is estimated that 70% of the population has been subjected to direct or indirect cybercrime. As per the latest statistics, 85% of Indian children have been subjected to cyberbullying in some form or the other.

The government has taken note of the rising numbers of such crimes and threats, and hence the Parliamentary Committee has summoned the officials from RBI and the Ministery of Electronics and Information Technology to the parliament on July 20, 2023, i.e. the first day of monsoon session at the parliament. This comes at a very crucial time as the Digital Personal Data Protection Bill is to be tabled in the parliament this session and this marks the revamping of the legislation and regulations in the Indian cyberspace. As emerging technologies have started to surround us it is pertinent to create legal safeguards and practices to protect the Indian Netizen at large.

Conclusion

The legal crossroads between Tata Sky and Linkedin will go a long way in establishing the mandates under the Intermediary guidelines in the form of legal precedents. The compliance with the rule of law is the most crucial aspect of any democracy. Hence the separation of power between the Legislature, Judiciary and Execution has been fundamental in safeguarding basic and fundamental rights.  Similarly, the RBI and Meity officials being summoned to the parliament shows the transparency in the system and defines the true spirit of democracy., which will contribute towards creating a safe and secured Indian Cyberspace.

‍