CERT IN
Amagi, Shiprocket post profits; US polls’ impact on IT
Amagi’s Q2 profit surged nearly 30x while Shiprocket swung into the black for the first time. This and more in today’s ETtech Top 5.
Tata Motors PV says CERT-In-flagged app vulnerabilities addressed through updates
The vulnerabilities identified in the iRA 2.0 and iRA.ev applications have been addressed through software updates and enhanced security measures, a Tata Motors Passenger Vehicles spokesperson told.
India flags Chinese-linked AI tools in hacking campaign against financial firms
India's cybersecurity agency named the hacking group behind a wave of AI-driven attacks on financial firms and identified its tools, at least two of them linked to China, adding India to a growing list of countries where
SBI-led banking alliance comes together to mount a defence to AI threats
Indian Banks' Association, led by State Bank of India, is developing a strategy for cybersecurity in the AI era. The initiative focuses on improving coordination among banks and facilitating timely information sharing. Increasing digitalization has expanded the potential for cyberattacks, urging immediate measures to mitigate risks.
AI-based cyber threat executing unauthorised fund transfers from banking firms: Cert-In
The Indian Computer Emergency Response Team (Cert-In) has named the incident "Crafty Falcon", which uses publicly available AI tools to execute complete attack chains autonomously at machine speed and generate and refine large numbers of tailored attack scripts in rapid succession.
Central cyber security agency warns banks, NBFCs of AI attacks; I4C reveals how hackers are executing multi-crore frauds
I4C has warned banks, NBFCs and fintech firms about AI-powered cyberattacks that enable hackers to execute fraudulent transactions at machine speed. The agency has flagged multi-crore unauthorised fund transfers, urged financial institutions to strengthen API security and directed them to report cyber incidents to CERT-In and RBI within six hours.
- Go To Page 1
India cybercrime agency warns financial firms on AI attacks
"These attacks are financially motivated and are being carried out with the help of Artificial Intelligence (AI) agents leading to machine speed compromise," the Indian Cybercrime Coordination Centre said in an advisory made public on Wednesday.
Cert-In gets Mythos access, being careful with testing: Officials
Government agencies cannot download the AI’s source code or weights for running on their own, completely isolated or ‘air-gapped’ systems. Instead, to use Mythos, they must send their proprietary data, code, or network blueprints over the internet to Anthropic’s cloud servers.
From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.
Kaspersky flags QR code payment scams as a key cyber risk for Indians travelling to Indonesia
As more Indian tourists move to Indonesia, Kaspersky's cybersecurity experts are sounding the alarm on rising online threats. They point out that travellers should be particularly careful about things like fake QR codes and phishing attacks, which are becoming more common. It's crucial for tourists to stay vigilant to protect themselves from these digital dangers.
OpenAI’s India user base doubles; Rapido GOV quadruples
Happy Tuesday! India has become ChatGPT’s largest market globally, with its user base doubling. This and more in today’s ETtech Morning Dispatch.
Govt mulls giving Cert-In enforceable powers to mandate patching
Last month, two critical flaws in the PHP programming language, discovered with the help of AI, created worldwide panic as hackers targeted the vulnerabilities millions of times, and led to governments including the US, UK, France, Germany and Japan taking down public websites. PHP powers 69.3% of websites worldwide.
Digital payments firms race to fortify defences as cyberattacks intensify
At Bengaluru-based Cashfree, attempted attacks have been taking place repeatedly over the past three weeks, occurring at least 10 times as frequently as a year ago, chief technology officer Ramkumar Venkatesan told ET. Attackers are increasingly combining multiple vulnerabilities to attack systems, he said.
Largescale cyberattacks test the limits of insurance cover
While businesses rush to enhance their cyber insurance cover, the incidents have triggered a debate over whether existing policies adequately cover emerging cyber risks. The biggest question insurers are policyholders seem to be confronting is: who pays when a vulnerability exposes thousands of organisations to the same threat?
RBI tightens cyber checks on lenders after spate of hacks
India's banks are facing increased scrutiny from the Reserve Bank of India regarding rising cyberattacks and AI risks. Recent incidents include data leaks and unauthorized transfers from customers' accounts at major lenders. The RBI is pushing banks to investigate vulnerabilities, particularly in their application programming interfaces. Cybersecurity agency recently offered training to officials from numerous financial institutions.
Cyberattacks hit NBFCs; Pine Labs Q2 profit zooms
Cyber criminals are targetting smaller NBFCs with specialised AI toolkits. This and more in today’s ETtech Top 5.
AI-powered cyberattacks siphon ₹300 crore from small NBFCs in two months
Recent cyberattacks have inflicted an estimated loss of ₹300 crore on Indian NBFC, with around 150 fraud cases reported. Focus has shifted towards identifying Chinese hacking platforms and AI toolkit involvement in these incidents. Exploiting operational weaknesses, these cybercriminals persistently launch their attacks, leading to urgent calls for NBFCs to bolster their cybersecurity frameworks to fend off further threats and safeguard their operations.
PHP scare sparks calls for urgent corp DPDP audits to plug all gaps
The incidents underline the need to identify gaps in companies’ security practices and clarify what constitutes reasonable safeguards before the law takes effect, they said. The DPDP Act is being implemented in phases, with a May 2027 deadline for full compliance obligations.
Social media norms, AI, deepfakes, chips among others on review list of parliamentary panel in 2026-27
The development comes as several incidents of age-inappropriate content, circulation of child sexual abuse material (CSAM), and alleged censorship on social media have been reported widely.
Anthropic IPO rocks Indian IT; Why Walmart is in no hurry to list Flipkart
Anthropic’s US IPO filing sent Indian IT stocks lower on Tuesday. This and more in today’s ETtech Top 5.
Cert-In and states rush to patch PHP flaws across govt portals
Last week, two critical cybersecurity flaws in the PHP programming language were discovered with the help of AI. Subsequently, Cert-In issued advised organisations to apply security patches. Thousands of state government portals, district administration websites, municipal corporation services, and public grievance redressal systems in India have historically relied on content management systems and frameworks based on the PHP programming language.
Prevention CERT-Inly better than cure
India is responding to cybersecurity challenges posed by the recent eMudhra incident and PHP vulnerabilities. Government agencies are conducting audits and investigations to strengthen digital security. The country is experiencing heightened cybersecurity risks due to its digital transformation and existing framework gaps. There are also concerns about unutilized funds and a shortage of cybersecurity talent. A broader approach is needed for transformative improvements in managing cybersecurity effectively.
Centre recognises AI needs more regulation: IT Secretary
Referring to a series of cyber incidents whereby AI agents escaping sandboxes and running rogue, Krishnan said many ways by which agents exploit systems is because someone didn't follow cyber hygiene.
SBI data leak scare: Bank contacts affected customers. Is your money safe?
State Bank of India has begun notifying customers potentially affected by a recent cyber incident. The bank assured customers that their account balances and funds remain secure throughout the investigation. Alerts were received about the data exposure from cybersecurity agencies, prompting immediate action by the bank. A total of 3,897 records containing personal customer information were identified in the investigation.
RBI asks banks, payment firms to forensically clear tech environments in case of a data breach
The RBI has asked financial entities to remove management and administrative interfaces from public internet access, enforce multi-factor authentication for administrative access, and restrict access to cloud and backend systems on a least-privilege basis. The measures include auditing source code, repositories, configuration files, client applications and cloud storage for exposed credentials, and immediately rotating and purging compromised credentials.
eMudhra to exit global SSL/TLS certificate business after controversy
Digital trust services provider eMudhra on Thursday said that it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident where its certificates were found to have vulnerabilities.
eMudhra breach: Netizens react as IT Ministry says impact on Indian sites ‘very limited’
Cybersecurity agency CERT-In warned that the compromised keys could let attackers issue fraudulent certificates for domains they do not control, impersonate legitimate websites and carry out attacks that intercept or modify encrypted communications.
SBI investigates dark web leak of 3.8 lakh records
State Bank of India is currently investigating a suspected data breach involving customer information found online. The breach reportedly exposed around 375,000 records containing personally identifiable information. SBI activated protocols and engaged cybersecurity experts to assess the extent of the breach. Preliminary analysis revealed that 3,897 customer records included sensitive personal data. Despite this incident, the bank's core business operations and financial performance remain unaffected.
SBI hit by cyberattack, customer data leaked on dark web: All you need to know
A preliminary analysis found about 375,000 records on the dark web. Of these, 3,897 customer records contained personally identifiable information, the bank said.
Load More
