CERT IN
Amagi, Shiprocket post profits; US polls’ impact on IT
Amagi’s Q2 profit surged nearly 30x while Shiprocket swung into the black for the first time. This and more in today’s ETtech Top 5.
Tata Motors PV says CERT-In-flagged app vulnerabilities addressed through updates
The vulnerabilities identified in the iRA 2.0 and iRA.ev applications have been addressed through software updates and enhanced security measures, a Tata Motors Passenger Vehicles spokesperson told.
India flags Chinese-linked AI tools in hacking campaign against financial firms
India's cybersecurity agency named the hacking group behind a wave of AI-driven attacks on financial firms and identified its tools, at least two of them linked to China, adding India to a growing list of countries where
SBI-led banking alliance comes together to mount a defence to AI threats
Indian Banks' Association, led by State Bank of India, is developing a strategy for cybersecurity in the AI era. The initiative focuses on improving coordination among banks and facilitating timely information sharing. Increasing digitalization has expanded the potential for cyberattacks, urging immediate measures to mitigate risks.
AI-based cyber threat executing unauthorised fund transfers from banking firms: Cert-In
The Indian Computer Emergency Response Team (Cert-In) has named the incident "Crafty Falcon", which uses publicly available AI tools to execute complete attack chains autonomously at machine speed and generate and refine large numbers of tailored attack scripts in rapid succession.
Central cyber security agency warns banks, NBFCs of AI attacks; I4C reveals how hackers are executing multi-crore frauds
I4C has warned banks, NBFCs and fintech firms about AI-powered cyberattacks that enable hackers to execute fraudulent transactions at machine speed. The agency has flagged multi-crore unauthorised fund transfers, urged financial institutions to strengthen API security and directed them to report cyber incidents to CERT-In and RBI within six hours.
India cybercrime agency warns financial firms on AI attacks
"These attacks are financially motivated and are being carried out with the help of Artificial Intelligence (AI) agents leading to machine speed compromise," the Indian Cybercrime Coordination Centre said in an advisory made public on Wednesday.
Cert-In gets Mythos access, being careful with testing: Officials
Government agencies cannot download the AI’s source code or weights for running on their own, completely isolated or ‘air-gapped’ systems. Instead, to use Mythos, they must send their proprietary data, code, or network blueprints over the internet to Anthropic’s cloud servers.
From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.
Kaspersky flags QR code payment scams as a key cyber risk for Indians travelling to Indonesia
As more Indian tourists move to Indonesia, Kaspersky's cybersecurity experts are sounding the alarm on rising online threats. They point out that travellers should be particularly careful about things like fake QR codes and phishing attacks, which are becoming more common. It's crucial for tourists to stay vigilant to protect themselves from these digital dangers.
OpenAI’s India user base doubles; Rapido GOV quadruples
Happy Tuesday! India has become ChatGPT’s largest market globally, with its user base doubling. This and more in today’s ETtech Morning Dispatch.
Govt mulls giving Cert-In enforceable powers to mandate patching
Last month, two critical flaws in the PHP programming language, discovered with the help of AI, created worldwide panic as hackers targeted the vulnerabilities millions of times, and led to governments including the US, UK, France, Germany and Japan taking down public websites. PHP powers 69.3% of websites worldwide.
RBI tightens cyber checks on lenders after spate of hacks
India's banks are facing increased scrutiny from the Reserve Bank of India regarding rising cyberattacks and AI risks. Recent incidents include data leaks and unauthorized transfers from customers' accounts at major lenders. The RBI is pushing banks to investigate vulnerabilities, particularly in their application programming interfaces. Cybersecurity agency recently offered training to officials from numerous financial institutions.
AI-powered cyberattacks siphon ₹300 crore from small NBFCs in two months
Recent cyberattacks have inflicted an estimated loss of ₹300 crore on Indian NBFC, with around 150 fraud cases reported. Focus has shifted towards identifying Chinese hacking platforms and AI toolkit involvement in these incidents. Exploiting operational weaknesses, these cybercriminals persistently launch their attacks, leading to urgent calls for NBFCs to bolster their cybersecurity frameworks to fend off further threats and safeguard their operations.
PHP scare sparks calls for urgent corp DPDP audits to plug all gaps
The incidents underline the need to identify gaps in companies’ security practices and clarify what constitutes reasonable safeguards before the law takes effect, they said. The DPDP Act is being implemented in phases, with a May 2027 deadline for full compliance obligations.
Social media norms, AI, deepfakes, chips among others on review list of parliamentary panel in 2026-27
The development comes as several incidents of age-inappropriate content, circulation of child sexual abuse material (CSAM), and alleged censorship on social media have been reported widely.
Cert-In and states rush to patch PHP flaws across govt portals
Last week, two critical cybersecurity flaws in the PHP programming language were discovered with the help of AI. Subsequently, Cert-In issued advised organisations to apply security patches. Thousands of state government portals, district administration websites, municipal corporation services, and public grievance redressal systems in India have historically relied on content management systems and frameworks based on the PHP programming language.
Prevention CERT-Inly better than cure
India is responding to cybersecurity challenges posed by the recent eMudhra incident and PHP vulnerabilities. Government agencies are conducting audits and investigations to strengthen digital security. The country is experiencing heightened cybersecurity risks due to its digital transformation and existing framework gaps. There are also concerns about unutilized funds and a shortage of cybersecurity talent. A broader approach is needed for transformative improvements in managing cybersecurity effectively.
SBI data leak scare: Bank contacts affected customers. Is your money safe?
State Bank of India has begun notifying customers potentially affected by a recent cyber incident. The bank assured customers that their account balances and funds remain secure throughout the investigation. Alerts were received about the data exposure from cybersecurity agencies, prompting immediate action by the bank. A total of 3,897 records containing personal customer information were identified in the investigation.
Load More
