Increasing digitalization in every sphere of human lives including the economy, the attack surface in the cyber space is ever widening, consequences are ever more disastrous, and cyber risks in every system — power and energy, water supply, gas pipelines, transportation, digital governance, banking and finance etc. We have been told by reliable sources that the communications, and power systems were turned off with ease in Venezuela before a country’s military moved in extracting the president of a sovereign country by force. We have been told that the presence of a foreign adversary in the CCTV system of Iran eased the targeted bombing of their top leaders. This means, foreign adversaries are most likely sitting inside our digital assets – routers, switches, consumer devices, CCTVs, even in power system control and data acquisition systems, banking servers, and what not. India, being a country of billion plus people are dependent on other nations for its entire compute stack — semiconductor chips, boards, servers, desktops, mobiles, laptops, consumer devices, and even majority of applications such as SCADA, automotive and avionics, defense systems, and so on. That not only puts pressure on our balance of payments but also puts us at the short end of immense cyber risk. Supply chain contamination and manipulation is one such risk, supply denial is another one, and further, even our cyber security tools and technology are majority from countries such as the US, Europe, and Israel — all of that makes us even more vulnerable. More recent situation with respect to AI supply chain — hardware such as GPU/TPU and memory, and generative AI systems such as charGPT, Gemini, Claude and more — are not only making this risk of dependency, and risk of manipulation even worse, but a bigger threat of data loss in extreme large scale is happening. Indians using these tools are putting in data of their health, their scientific documents, their personal information and much more for free or cheap AI usage, and peta bytes of Indian users data are being collected by foreign entities in large scale — which will either be used to build models and sold back at high price to India as “India-specific” models, or more likely, will be used by adversaries to create targeted disinformation campaign to manipulate the minds of citizens. India, we have a problem! We need to fix this. This talk will address these threats and make some suggestions on how to tackle these issues.