CLAT - GK Including Current Affairs

‘Mythos Risk’ — FM Sitharaman Pings Anthropic, Asks Banks to Fortify Cyber Defences — CLAT 2027 S&T

Anthropic Mythos AI — Source: Business Today

CURRENT AFFAIRS | 24 APRIL 2026

CLAT GK + CONSTITUTIONAL LAW & RELEVANT AREA

Union Finance Minister Nirmala Sitharaman on 23 April 2026 chaired a high-level meeting with heads of scheduled commercial banks, the Reserve Bank of India and the Ministry of Electronics & Information Technology on the systemic risks posed to India’s financial system by Anthropic’s newly-unveiled frontier AI model ‘Claude Mythos’. Anthropic — the US-based Amazon- and Google-backed lab — has described Mythos as ‘the most powerful model we have ever built’; in UK AI Security Institute evaluations it scored 73% on expert-level hacking tasks and autonomously identified critical vulnerabilities in every widely-used operating system and web browser. Sitharaman urged the Indian Banks’ Association (IBA) to build a coordinated institutional defence with CERT-In, NPCI and RBI, and confirmed that the government is already in conversation with Anthropic’s senior leadership in the United States.

Key Facts at a Glance

Meeting 23 April 2026 — FM Sitharaman with RBI, MeitY and heads of scheduled commercial banks
AI model Claude Mythos (Anthropic) — unveiled April 2026 as preview under ‘Project Glasswing’
Capability concern Autonomously discovers ‘zero-day’ vulnerabilities in widely-used OS and browsers
UK evaluation 73% on expert-level hacking tasks — UK AI Security Institute benchmarks
Directive IBA to build coordinated mechanism with CERT-In, NPCI, RBI, banks
Nodal cyber agency CERT-In under Ministry of Electronics & IT (IT Act §70B)
Reporting timeline 6 hours — CERT-In Directions, 28 April 2022
Statutory pillars IT Act 2000 · DPDP Act 2023 · PMLA 2002

Constitutional & Statutory Framework

  • IT Act, 2000 §70B — constitutes CERT-In as national nodal agency for cyber-incident response.
  • IT Act, 2000 §70 — empowers declaration of ‘critical information infrastructure’ (CII).
  • IT Act, 2000 §43A — compensation for failure to protect ‘sensitive personal data’.
  • DPDP Act, 2023 — India’s dedicated personal data-protection statute; §10 imposes ‘reasonable security safeguards’ on Data Fiduciaries.
  • PMLA, 2002 — catches cyber-enabled financial crime and money-laundering trails.
  • Article 21 — right to life includes right to privacy and informational self-determination.
  • Article 14 & 19 — privacy jurisprudence draws additional textual anchors from equality and freedom of expression.
  • BNS, 2023 — substantive criminal offences (fraud, cheating, forgery) that underpin cyber-crime prosecutions.

Landmark Cases & Key Organisations

  • KS Puttaswamy v Union of India (2017) — 9-judge bench: right to privacy is a fundamental right; informational privacy explicitly recognised.
  • Puttaswamy (Aadhaar) (2018) — Proportionality test: any restriction must satisfy legality, legitimate aim, proportionality, procedural safeguards.
  • Shreya Singhal v Union of India (2015) — Struck down §66A, IT Act; upheld §69A on narrow grounds — baseline for content-regulation review.
  • Anuradha Bhasin v Union of India (2020) — Internet access itself is a part of Article 19(1)(a) freedom of speech.
  • CERT-In — national cyber-incident response agency; issued April 2022 Directions mandating 6-hour reporting for defined cyber-incidents.
  • Indian Banks’ Association (IBA) — representative body of Indian banks; now tasked with building a sectoral cyber-defence playbook against AI-enabled threats.

CLAT 2027 Angle — Why This Matters

  • Expect passages linking ‘AI-enabled hacking’ with Puttaswamy’s proportionality test — does a regulatory response satisfy legality + legitimate aim + proportionality + procedural safeguards?
  • Key vocabulary: zero-day, critical information infrastructure, Data Fiduciary, Data Principal, reasonable security safeguards.
  • Remember triad: IT Act (preventive/adjudicatory) + DPDP (privacy) + BNS/PMLA (criminal).
  • Policy angle: India is moving towards a sectoral AI regulation conversation — contrast with EU AI Act risk-tiers and UK AI Safety Institute.

Mnemonic

MYTHOS — Models find Yawning vulnerabilities, Trigger Highest-level Oversight, Sectoral defence.

Want structured CLAT preparation? Try our free 5-day Bodh Demo Course with live classes and expert guidance. Start Free →

Test Yourself — 10 MCQs

Take a 10-question quiz on this topic. Answers and explanations appear immediately on submission.

Practice Quiz — 10 CLAT-Style Questions

Click an option to reveal the answer and explanation.

Quick answers

Which ministry hosts the Indian Computer Emergency Response Team (CERT-In)?
Ministry of Electronics & Information Technology (MeitY). CERT-In is housed under MeitY and is designated as the national nodal agency for cyber incidents under §70B of the IT Act, 2000.
The statutory basis for CERT-In is:
Section 70B, IT Act 2000. Section 70B of the Information Technology Act, 2000 mandates CERT-In as the national agency for cyber-incident response and prevention.
Under CERT-In's April 2022 Directions, cyber-incident reporting must be made within:
6 hours of noticing the incident. CERT-In Directions dated 28 April 2022 require mandatory reporting of specified cyber-incidents within 6 hours.
Which Act creates the legal framework for personal data protection in India?
Digital Personal Data Protection Act, 2023. The DPDP Act, 2023 is India's dedicated data-protection statute, based on the Puttaswamy right-to-privacy judgment.
The right to informational privacy was read into the Constitution in:
KS Puttaswamy v Union of India (2017) — 9-judge bench. In Puttaswamy (2017), a nine-judge bench unanimously held that the right to privacy is a fundamental right under Articles 14, 19 and 21.
Anthropic's 'Mythos' model is said to be dangerous primarily because it can autonomously:
Identify 'zero-day' vulnerabilities in widely-used software & infrastructure. Mythos reportedly autonomously finds serious, previously-unknown vulnerabilities (zero-days) in every major operating system and web browser — an unprecedented offensive-security capability.
Share this article
CLAT Gurukul
Written by CLAT Gurukul

Ready to Crack CLAT?

This article covers just one topic. Our courses cover the entire CLAT syllabus with 500+ hours of live classes, 10,000+ practice questions, and personal mentorship from top faculty.

500+Hours of Classes
10,000+Practice Questions
50+Mock Tests
Start your CLAT prep with a free 5-day demo course Start Free Trial →