#FactCheck-Amarnath Yatra Video Falsely Shared as Chinese Incursion in Arunachal Pradesh

Introduction

‍

On June 2, 2026, U.S. President Donald Trump signed an executive order called "Promoting Artificial Intelligence Innovation and Security." The order tells federal agencies to improve cyber defences against AI-based threats and creates a system where AI companies can choose to let the government access powerful new models before they are released to the public. This happens as the U.S. and China are in a heated competition to lead the next generation of AI. While the order only affects the United States, its impact could reach the global AI industry, including India.

‍

What Does the Executive Order Do?

‍

The White House order focuses on three areas: First, it aims to upgrade government cyber security. Federal agencies must strengthen their information systems with AI-enabled defences within 30 days. Cyber Security and Infrastructure Agency (CISA) will issue new guidelines for civilian agencies, and an AI Cyber security Clearinghouse will be established for the government and private companies to share and resolve software vulnerabilities. 

Second, the order introduces a voluntary pre-release review process for advanced AI models. Before a new model is publicly available, AI companies can give the government up to 30 days to evaluate it for cyber security risks. An earlier draft proposed a 90-day review period, but this was cut back due to feedback from the technology industry. The government will also create classified benchmarks to figure out which models qualify as a “covered frontier model” and are therefore subject to this review process. 

Finally, the order emphasises criminal enforcement. It prioritises legal action against those who use AI tools to commit cybercrimes. 

According to the White House, the aim is to promote AI innovation and security by collaborating with the private sector to modernise government and private information systems and protect them from external threats.

‍

Why Does This Matter Globally?

‍

1. AI Is Now a National Security Issue Until recently, most governments viewed AI as an economic or scientific issue. This order officially changes that for the United States, placing advanced AI alongside other sensitive technologies that need government oversight before deployment.  When the world's largest military makes this change, other governments pay attention. Countries allied with or partnering with the U.S. will likely revisit their own AI governance frameworks in the months ahead. 

2. Two Competing Models for the World The U.S. and EU represent two different approaches to AI governance. The EU AI Act lays down strict rules, is focused on ethics, and requires heavy compliance. The US approach is lighter on ethics, promoting voluntary cooperation, prioritising security, and encouraging innovation. Countries developing their own AI policies will either continue to align with one of these models or take ideas from both.  The Atlantic Council has pointed out that if the U.S. model is successful, it could influence international security standards for AI development, even without formal global agreements. 

3. The China Factor  Trump initially delayed signing the order, worried it would slow down American companies and give China an edge. The final version avoids mandatory licensing requirements but clearly indicates that the U.S. aims to lead, not only in building AI but also in securing it. China is likely to respond by speeding up its own evaluation systems, creating another global framework.

‍

What Could This Mean for India?

‍

India has taken a careful, non-mandatory approach to AI governance. MeitY's India AI Governance Guidelines, issued in November 2025, are based on principles and are not binding. India's AI Safety Institute has been announced but is not fully operational.  Efforts to create binding regulation have been seen in actions like the Private Member's Bill, the AI Ethics and Accountability Bill, 2025, introduced in the Lok Sabha. This bill suggests mandatory reviews for high-risk AI systems but has not been passed yet. It's important to note that groups like the AI Governance Expert Group (AIGEG) and the Technology and Policy Expert Committee (TPEC) serve only in an advisory role; they do not have legislative power. As a result, nothing binding has been implemented so far.  The Trump order puts additional pressure on India to pass measurable, binding AI-security-related measures. As AI use increases in banking, healthcare, telecommunications, and government services and frontier AI models continue to evolve without global oversight, stronger security evaluation methods are becoming necessary, especially in critical sectors.

Recent events prove this need. In June 2026, a Distributed Denial-of-Service (DDoS) attack hit the CBSE's On-Screen Marking portal. It saw 1.5 million requests in two minutes and over one lakh unauthorised file access attempts targeting a system used by millions of students. Similar attacks have impacted AIIMS Delhi and other public digital infrastructure. As AI tools make these attacks easier to carry out, security testing before deployment can no longer be seen as optional.

For Indian AI companies aiming at global markets, the U.S. framework is also important for business. Standards that are set voluntarily in Washington often become necessary for international partnerships and contracts.

‍

Conclusion

‍

Trump's AI cyber security order signals a shift. A government that resisted regulating AI has now recognised that powerful models need oversight before they reach the public. Its immediate impact affects U.S. agencies and developers. However, the broader message is that advanced AI is a national security concern. This will influence policy conversations around the world. For India, the priority is to develop its own security evaluation capacity now, rather than waiting to adopt frameworks created for other contexts.

‍

References

‍

• White House Executive Order, "Promoting Advanced Artificial Intelligence Innovation and Security," June 2, 2026
• Federal Register — Executive Order Publication, June 5, 2026
• Council on Foreign Relations — Assessing Trump's Executive Order on AI Oversight, June 4, 2026
• Atlantic Council — Reading Between the Lines of Trump's New Executive Order on AI, June 3, 2026
• Times of India — Donald Trump Passes AI Cyber security Order
• MeitY India AI Governance Guidelines, November 2025
• AI Ethics and Accountability Bill, 2025 — Explained
• NPR — Trump Signs EO Seeking Early Government Access to Powerful AI Models

‍

Executive Summary

‍

‍
A video of Prime Minister Narendra Modi is being widely shared on social media, in which he appears to say that every woman would receive 1 gram of gold free against one Aadhaar card. The clip is being circulated with misleading claims suggesting a government scheme. Research by CyberPeace Research Wing found that the audio of Prime Minister Modi’s 2019 video was manipulated using AI technology and shared with a misleading claim.

‍

Claim

‍

An Instagram user shared the viral video claiming that PM Modi announced free gold for women.

• https://www.instagram.com/reels/DXt5tFak02F/
• https://archive.ph/EDSZS 

‍

‍

‍

Fact Check

‍

To verify the claim, we conducted a keyword search on Google but found no credible media reports or official announcements supporting such a scheme. We then extracted keyframes from the viral clip and performed a reverse image search. This led us to the original video uploaded by DD News on February 24, 2019. In the authentic footage, PM Modi was addressing a public rally in Gorakhpur. At no point did he mention distributing gold to women.

• https://www.youtube.com/watch?v=4zFha2Z-pR8

‍

‍

Further examination of the viral clip raised suspicions of audio manipulation. We analyzed the speech using AI detection tool Hive Moderation, which indicated a 99% probability that the speech was AI-generated.

‍

Conclusion

‍

Our research found that the viral claim is false. The video uses footage from PM Modi’s 2019 speech, while the original audio appears to have been replaced using AI-generated voice technology to spread a misleading claim about free gold distribution.

‍

Introduction

The hospitality industry is noted to be one of the industries most influenced by technology. Hotels, restaurants, and travel services are increasingly reliant on digital technologies to automate core operations and customer interactions. The shift to electronic modes of conducting business has made the industry a popular target for cyber threats. In light of increasing cyber threats, safeguarding personal and sensitive personal data on the part of the hospitality industry becomes significant not only from a customer standpoint but also from an organisational and legal perspective.

Role of cybersecurity in the hospitality industry

A hospitality industry-based entity (“HI entity”) deploys several technologies not only to automate operations but to also deliver excellent customer experiences. Technologies such as IoTs that enable smart controls in rooms, Point-of-Sale systems that manage reservations, Call Accounting Systems that track and record customer calls, keyless entry systems, and mobile apps that facilitate easy booking and service requests are popularly used in addition to operative technologies such as Property Management Systems, Hotel Accounting Systems, Local Area Networks (LAN).{1} These technologies collect vast volumes of data daily due to the nature of operations. Such data necessarily includes personal information such as names, addresses, phone numbers, email IDs etc. and sensitive information such as gender, bank account and payment details, health information pertaining to food allergens etc. Resultantly, the breach and loss of such critical data impacts customer trust and loyalty and in turn, their retention within the business. Lack of adequate cybersecurity measures also impacts the reputation and goodwill of an HI entity since customers are more likely to opt for establishments that prioritise the protection of their data. In 2022, cybercriminals syphoned 20GB of internal documents and customer data from Marriott Hotels, which included credit card information and staff information such as wage data, corporate card number and even a personnel assessment file. A much larger breach was seen in 2018, where 383 million booking records and 5.3 million unencrypted passport numbers were stolen from Marriott’s servers.{2}

Cybersecurity is also central to safeguarding trade secrets and key confidential trade information. An estimate of US $6 trillion per year on average amounts to losses generated from cybercrimes.{3} The figure, however, does not include the cost of breach, expenses related to incident response, legal fees, regulatory fines etc which may be significantly higher for a HI entity when loss of potential profits is factored in.

Cybersecurity is also central from a legal standpoint. Legal provisions in various jurisdictions mandate the protection of guest data. In India, the Digital Personal Data Protection Act 2023, imposes a penalty of up to Rs. 50 Crores on a breach in observing obligations to take reasonable security safeguards to prevent personal data breach.{4} Similarly, the General Data Protection Regulation (GDPR) of the European Union also has guidelines for protecting personal data. Several other industry-specific rules, such as those pertaining to consumer protection,  may also be applicable.

Breaches and Mitigation

There are several kinds of cyber security threats faced by an HI entity. “Fake Booking” is a popular method of cyber attack, whereby attackers build and design a website that is modelled exactly after the hotel’s legitimate website. Many customers end up using such malicious phishing websites thereby exposing their personal and sensitive personal data to threats. Additionally, the provision of free wifi within hotel premises, usually accessible freely to the public, implies that a malicious actor may introduce viruses and updates bearing malware. Other common cyber threats include denial of service (DoS) attacks, supply chain attacks, ransomware threats, SQL injection attacks (a type of attack where malicious code is inserted into a database to manipulate data and gain access to information), buffer overflow or buffer overrun (when the amount of data exceeds its storage capacity, implying that the excess data overflows into other memory locations and corrupt or overwrites data in those locations). 

One of the best ways to manage data breaches is to leverage newer technologies that operate on a “privacy by design” model. An HI entity must deploy web application firewalls (WAF) that differ from regular firewalls since they can filter the content of specific web applications and prevent cyber attacks. Another method to safeguard data is by deploying a digital certificate which binds a message/instruction to the owner/generator of the message. This is useful in preventing any false claims fraud by customers. Digital certificates may be deployed on distributed ledger technologies such as blockchain, that are noted for their immutability, transparency and security. Self-sovereign identities or Identifiers (SSI) are also a security use-concept of blockchain whereby individuals own and control their personal data, thereby eliminating reliance on central authorities.{5} In the hospitality industry, SSIs enhance cybersecurity by securely storing identity-related information on a decentralised network, thereby reducing the risk of data breaches. Users can selectively share their information, ensuring privacy and minimising data exposure. This approach not only protects guests' personal details but also streamlines authentication processes, making interactions safer and more efficient.

From a less technical standpoint, cybersecurity insurance may be opted for by a hotel to secure themselves and customer information against breach. Through such insurance, a hotel may cover the liability that arises from breaches caused by both first- and third-party actions.{6} Additionally, Payment Cards Industry Data Security Standards should be adhered to, since these standards ensure that businesses should apply best practices when processing credit card data through optimised security. Employee training and upskilling in basic, practical cybersecurity measures and good practices is also a critical component of a comprehensive cybersecurity strategy.

References:

• [1]  The Growing Importance of Cybersecurity in the Hospitality Industry”, Alfatec, 11 September 2023 https://www.alfatec.ai/academy/resource-library/the-growing-importance-of-cybersecurity-in-the-hospitality-industry
• [2]  Vigliarolo, Brandon, “Marriott Hotels admit to third data breach in 4 years”, 6 July 2022 https://www.theregister.com/2022/07/06/marriott_hotels_suffer_yet_another/#:~:text=In%20the%20case%20of%20the,of%20an%20individual%20organization%20ever. 

• [3] Shabani, Neda & Munir, Arslan. (2020). A Review of Cyber Security Issues in the Hospitality Industry. 10.1007/978-3-030-52243-8_35. https://www.researchgate.net/publication/342683038_A_Review_of_Cyber_Security_Issues_in_Hospitality_Industry/citation/download    
• [4] The Digital Personal Data Protection Act 2023 https://www.meity.gov.in/writereaddata/files/Digital%20Personal%20Data%20Protection%20Act%202023.pdf 
• [5]  “What is self-sovereign identity?”, Sovrin, 6 December 2018 https://sovrin.org/faq/what-is-self-sovereign-identity/ 
• [6] Yasar, Kinza, “Cyber Insurance”, Tech Target https://www.techtarget.com/searchsecurity/definition/cybersecurity-insurance-cybersecurity-liability-insurance