DARK WEB
EU's 2030 ban on single-use ketchup sachets puts condiment packets in spotlight
Starting in 2030, the European Union will ban single-serve condiment sachets, including ketchup and mayonnaise, in restaurants as part of efforts to tackle waste. Takeaway services and specific healthcare facilities will be exempt to ensure hygiene. Alternative solutions such as refillable dispensers and small bowls will be encouraged, highlighting a shift towards more sustainable practices in response to environmental concerns about single-use plastics.
India flags Chinese-linked AI tools in hacking campaign against financial firms
India's cybersecurity agency named the hacking group behind a wave of AI-driven attacks on financial firms and identified its tools, at least two of them linked to China, adding India to a growing list of countries where
AI turns cyber threat into boardroom crisis
In India, State Bank of India disclosed that 375,000 customer records had been leaked on the dark web, while vulnerabilities in eMudhra’s digital certificate keys exposed websites to potential attacks.
From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.
SBI hunts for weak links after suspected cyberattack exposed 3,897 customer records
State Bank of India (SBI) is investigating a suspected cyberattack that may have exposed 3,897 customer records, with root cause analysis still underway. The bank is focusing on containing the breach and fixing vulnerabilities after customer information, including names, contact details and loan records, appeared on the dark web.
Spandana Sphoorty Financial reports cyberattack involving its bank account
Spandana Sphoorty Financial encountered a cyber fraud incident with unauthorized transactions on November 1. The amount involved was approximately 78 million rupees, which was transferred to multiple beneficiary accounts. Upon detection, the company promptly stopped affected services and notified its bank. A request for reversal and account freezing was also made to the bank. Additionally, Spandana registered a complaint with the National Cyber Crime Reporting Portal.
- Go To Page 1

Largescale cyberattacks test the limits of insurance cover
While businesses rush to enhance their cyber insurance cover, the incidents have triggered a debate over whether existing policies adequately cover emerging cyber risks. The biggest question insurers are policyholders seem to be confronting is: who pays when a vulnerability exposes thousands of organisations to the same threat?

AU Small Finance investigating potential data leak involving SaaS platform
AU Small Finance Bank is investigating a potential data leak involving a Salesforce-managed software platform that holds limited information on its vehicle loan customers. The bank said its own systems remain unaffected and banking services are operating normally.

AI-powered cyberattacks siphon ₹300 crore from small NBFCs in two months
Recent cyberattacks have inflicted an estimated loss of ₹300 crore on Indian NBFC, with around 150 fraud cases reported. Focus has shifted towards identifying Chinese hacking platforms and AI toolkit involvement in these incidents. Exploiting operational weaknesses, these cybercriminals persistently launch their attacks, leading to urgent calls for NBFCs to bolster their cybersecurity frameworks to fend off further threats and safeguard their operations.

41,000 US Homeland Security employee names leaked in major hack
A significant data breach has exposed personal details of more than 40,000 Department of Homeland Security employees. The leaked information includes identities, contact details, and job titles of various officials. Distributed Denial of Secrets claims responsibility for releasing the data, asserting a right to access such information. The Department of Homeland Security confirmed it is actively addressing the breach while ensuring employee protection.

AT&T data breach settlement checks: Who gould get $5,000 and why others may receive less than $10
AT&T settlement checks: AT&T customers who filed claims under the $177 million data breach settlement could receive up to $5,000 for documented losses, while tiered cash payments may be much smaller. With final court approval granted, claimants are waiting for a confirmed payment date. The filing deadline passed in December 2025.

"Sink the idea": Mumbai sweats over a sea plan that intitially made waves but is now causing ripples of worry
Light pollution is already recognised as a global environmental and public health concern. Research has linked artificial light to sleep disturbances, mood disorders and higher risks of obesity and cardiovascular diseases in humans. It can also alter plant growth and interfere with animals' natural behaviour and ecological relationships.

Why is Verizon stock down today? Verizon Communications Inc share price falls at US Stock Market
Verizon now expects to add between 1.1 million and 1.2 million postpaid phone subscribers this year compared with earlier projections of 750,000 to 1 million.

Verizon lifts annual forecasts, signs more than $2 billion AI infrastructure deal with AWS
Verizon is feeling positive about the growth of its wireless subscribers, raising its expectations for postpaid phone additions. The company has entered into a significant partnership with Amazon Web Services, securing an AI infrastructure agreement valued at over $2 billion. In the third quarter, Verizon reported a boost in subscribers that surpassed analyst predictions, though revenue dipped due to decreased device upgrades, as users kept their phones for longer.

Unacademy founders plan AI fund; Flipkart’s premium push
Happy Monday! Unacademy’s founders are raising a fund focused on AI and deeptech. This and more in today’s ETtech Morning Dispatch.

More bugs out there: PHP2Shell is just the tip of the internet’s old-code iceberg
On Wednesday, critical vulnerabilities in PHP were publicly revealed, impacting a vast number of websites. The discovered flaws pose serious security risks, prompting urgent updates from website administrators. Many organizations swiftly shut down their services to mitigate potential breaches from the vulnerabilities. Experts emphasized the importance of identifying PHP versions and applying necessary patches immediately. They also recommended increased funding for PHP development to prevent future risks and ensure security.

RBI alert about AI-driven cyber risks, banks taking steps to plug vulnerabilities: Governor
RBI Governor Sanjay Malhotra highlighted concerns regarding emerging cyber threats from artificial intelligence in banking systems. Measures are being implemented by banks and the RBI to secure IT infrastructure against these risks. The State Bank of India acknowledged potential data exposure, prompting increased vigilance for customer protection. Malhotra expressed confidence in India's robust forex reserves and external sector resilience amid these challenges.

SBI data leak scare: Bank contacts affected customers. Is your money safe?
State Bank of India has begun notifying customers potentially affected by a recent cyber incident. The bank assured customers that their account balances and funds remain secure throughout the investigation. Alerts were received about the data exposure from cybersecurity agencies, prompting immediate action by the bank. A total of 3,897 records containing personal customer information were identified in the investigation.

SBI weighs data leak impact, alerts cyber cover provider
SBI may seek a claim under a Rs 1,425-crore cyber insurance policy with Oriental Insurance following a suspected leak of customer data, people familiar with the matter told ET. "SBI is in the process of notifying the insurer about the claim," said a person aware of the development.

From eMudhra to PHP: Breach spree hits tech infrastructure, AI emerges as threat multiplier
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates and critical software vulnerabilities. A security breach at eMudhra impacted its global digital certificate business but was managed promptly. Additionally, critical vulnerabilities in PHP temporarily led to the shutdown of various websites for security updates. A supply-chain attack compromised the LiteLLM Python package, affecting its users significantly.

Explained: What is PHP and why did it take government websites offline?
The developers of PHP said on Wednesday they would release patches for two critical vulnerabilities, and EU cybersecurity officials warned organisations unable to apply the fixes to take affected websites offline. Here is what you need to know:

ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline
Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain passwords, authentication tokens, API keys and certificates belonging to other requests or the server itself, as per Wiz Research.

Government websites in Europe, US go dark over AI-detected flaw in a web programming language PHP
The website of the Finnish government, for one, was only partly available Wednesday. A message to visitors said government websites were experiencing a temporary disruption and were fully or partially unavailable while the issue was being resolved.

SBI Data Breach: SBI flags dark web exposure of 3,897 customer records; names, mobile numbers, addresses among data leaked
SBI Data Leak: State Bank of India has flagged the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web. The data reportedly includes names, mobile numbers, dates of birth and residential addresses. SBI has initiated incident response measures and engaged an independent cybersecurity agency to investigate the alleged compromise.

SBI investigates dark web leak of 3.8 lakh records
State Bank of India is currently investigating a suspected data breach involving customer information found online. The breach reportedly exposed around 375,000 records containing personally identifiable information. SBI activated protocols and engaged cybersecurity experts to assess the extent of the breach. Preliminary analysis revealed that 3,897 customer records included sensitive personal data. Despite this incident, the bank's core business operations and financial performance remain unaffected.

Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder
eMudhra issues digital signature and website security certificates to enable them securely connect to browsers for public access. "There's no impact to subscribers because we have done all the actions. We are also working with our customers to notify them that there is no impact because no certificates were issued. This does not affect our other lines of business, which is the India digital signature and our enterprise solutions business," eMudhra co-founder Kaushik Srinivasan told PTI.

Eternal’s Q2 profit rises; SBI flags customer data leak
Eternal’s Q2 profit has surged, with Blinkit contributing significantly to the growth. This and more in today’s ETtech Top 5.

SBI cyber attack update: State Bank of India says customer balances are completely safe despite data leak
The State Bank of India has acknowledged a recent data breach that resulted in the exposure of limited customer information. Assuring its clients, the bank confirmed that financial assets remain secure.

SBI hit by cyberattack, customer data leaked on dark web: All you need to know
A preliminary analysis found about 375,000 records on the dark web. Of these, 3,897 customer records contained personally identifiable information, the bank said.
Load More