AI-Driven Cybersecurity and Its Legal Challenges in India: A Comprehensive Review

Artificial Intelligence is rapidly transforming cybersecurity by enabling advanced threat detection, predictive analytics, automated incident response systems, and behavioral risk modeling. These capabilities strengthen digital infrastructures but also introduce new vulnerabilities, including algorithmic bias, lack of transparency, and the rise of AI-enabled cyberattacks such as deepfake-based fraud, AI-generated phishing, and autonomous malware. In the Indian context, the integration of AI into cybersecurity intersects with evolving legal frameworks such as the Information Technology Act (2000) and the Digital Personal Data Protection Act (2023). However, the absence of AI-specific regulations creates substantial challenges concerning liability, data protection, algorithmic accountability, and cross-border cybercrime. This review paper provides a comprehensive analysis of AI-driven cybersecurity technologies, emerging threats, and the associated legal and ethical challenges in India. It examines AI applications including intrusion detection systems, malware classification, behavioral analytics, and automated incident response, while analyzing emerging AI-enabled cyber threats such as adversarial attacks, deepfake fraud, information warfare, and surveillance technologies. The paper compares India's existing legal frameworks with global approaches including the European Union's AI Act, OECD AI Principles, and NIST AI Risk Management Framework. It identifies critical research and policy gaps including the absence of AI-specific legislation, inadequate algorithmic accountability mechanisms, and insufficient cybersecurity standards for AI systems. The paper concludes that India must adopt stronger regulatory mechanisms, establish AI auditing standards, and promote cross-sector collaboration to ensure safe, responsible, and lawful use of AI in cybersecurity.