DARK WEB SECURITY
India flags Chinese-linked AI tools in hacking campaign against financial firms
India's cybersecurity agency named the hacking group behind a wave of AI-driven attacks on financial firms and identified its tools, at least two of them linked to China, adding India to a growing list of countries where
AI turns cyber threat into boardroom crisis
In India, State Bank of India disclosed that 375,000 customer records had been leaked on the dark web, while vulnerabilities in eMudhra’s digital certificate keys exposed websites to potential attacks.
From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.
Largescale cyberattacks test the limits of insurance cover
While businesses rush to enhance their cyber insurance cover, the incidents have triggered a debate over whether existing policies adequately cover emerging cyber risks. The biggest question insurers are policyholders seem to be confronting is: who pays when a vulnerability exposes thousands of organisations to the same threat?
AI-powered cyberattacks siphon ₹300 crore from small NBFCs in two months
Recent cyberattacks have inflicted an estimated loss of ₹300 crore on Indian NBFC, with around 150 fraud cases reported. Focus has shifted towards identifying Chinese hacking platforms and AI toolkit involvement in these incidents. Exploiting operational weaknesses, these cybercriminals persistently launch their attacks, leading to urgent calls for NBFCs to bolster their cybersecurity frameworks to fend off further threats and safeguard their operations.
41,000 US Homeland Security employee names leaked in major hack
A significant data breach has exposed personal details of more than 40,000 Department of Homeland Security employees. The leaked information includes identities, contact details, and job titles of various officials. Distributed Denial of Secrets claims responsibility for releasing the data, asserting a right to access such information. The Department of Homeland Security confirmed it is actively addressing the breach while ensuring employee protection.
- Go To Page 1
Rogue AI agents exposing India’s data law blindspots
As companies edge closer to the May 2027 enforcement deadline for the Digital Personal Data Protection (DPDP) law, AI’s emerging cybersecurity risks are creating tension over what might constitute adequate compliance just six to seven months from now.
Unacademy founders plan AI fund; Flipkart’s premium push
Happy Monday! Unacademy’s founders are raising a fund focused on AI and deeptech. This and more in today’s ETtech Morning Dispatch.
More bugs out there: PHP2Shell is just the tip of the internet’s old-code iceberg
On Wednesday, critical vulnerabilities in PHP were publicly revealed, impacting a vast number of websites. The discovered flaws pose serious security risks, prompting urgent updates from website administrators. Many organizations swiftly shut down their services to mitigate potential breaches from the vulnerabilities. Experts emphasized the importance of identifying PHP versions and applying necessary patches immediately. They also recommended increased funding for PHP development to prevent future risks and ensure security.
RBI alert about AI-driven cyber risks, banks taking steps to plug vulnerabilities: Governor
RBI Governor Sanjay Malhotra highlighted concerns regarding emerging cyber threats from artificial intelligence in banking systems. Measures are being implemented by banks and the RBI to secure IT infrastructure against these risks. The State Bank of India acknowledged potential data exposure, prompting increased vigilance for customer protection. Malhotra expressed confidence in India's robust forex reserves and external sector resilience amid these challenges.
SBI weighs data leak impact, alerts cyber cover provider
SBI may seek a claim under a Rs 1,425-crore cyber insurance policy with Oriental Insurance following a suspected leak of customer data, people familiar with the matter told ET. "SBI is in the process of notifying the insurer about the claim," said a person aware of the development.
Swiggy’s Q2 report card; eMudhra to exit certificate biz
Swiggy continued on its growth trajectory while bringing down losses in Q2FY27. This and more in today’s ETtech Top 5.
From eMudhra to PHP: Breach spree hits tech infrastructure, AI emerges as threat multiplier
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates and critical software vulnerabilities. A security breach at eMudhra impacted its global digital certificate business but was managed promptly. Additionally, critical vulnerabilities in PHP temporarily led to the shutdown of various websites for security updates. A supply-chain attack compromised the LiteLLM Python package, affecting its users significantly.
Explained: What is PHP and why did it take government websites offline?
The developers of PHP said on Wednesday they would release patches for two critical vulnerabilities, and EU cybersecurity officials warned organisations unable to apply the fixes to take affected websites offline. Here is what you need to know:
ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline
Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain passwords, authentication tokens, API keys and certificates belonging to other requests or the server itself, as per Wiz Research.
Stock crash alert! eMudhra shares plunge 37% in just two sessions. What’s unfolding?
eMudhra shares plunged 37% in two sessions after a critical security incident involving compromised private keys linked to eight intermediate Certificate Authority certificates. MeitY said its Indian digital signature and eSign services remain unaffected. The affected global TLS business contributes around 1% of revenue, but reputational risks remain.
SBI data leak: Is your bank account safe? What was breached and should you worry?
SBI bank data breach: Country's largest bank, SBI, is investigating a suspected data leak involving nearly 4,000 customer records identified on the dark web. Here is what information was exposed, whether your bank account is safe and the precautions customers should take.
Vulnerable keys were created but never put to commercial use, investigation on: eMudhra cofounder
eMudhra issues digital signature and website security certificates to enable them securely connect to browsers for public access. "There's no impact to subscribers because we have done all the actions. We are also working with our customers to notify them that there is no impact because no certificates were issued. This does not affect our other lines of business, which is the India digital signature and our enterprise solutions business," eMudhra co-founder Kaushik Srinivasan told PTI.
Eternal’s Q2 profit rises; SBI flags customer data leak
Eternal’s Q2 profit has surged, with Blinkit contributing significantly to the growth. This and more in today’s ETtech Top 5.
SBI cyber attack update: State Bank of India says customer balances are completely safe despite data leak
The State Bank of India has acknowledged a recent data breach that resulted in the exposure of limited customer information. Assuring its clients, the bank confirmed that financial assets remain secure.
Need regional resolve to deter terror: Amit Shah
Addressing the first Home Ministers' Meeting of BIMSTEC countries, Amit Shah said India follows a policy of zero tolerance towards terrorism. He said the trust underlying the partnership of BIMSTEC countries is strengthened by the belief that the security arrangements of each member country should contribute to the security of the other members.
SEBI Credit Risk-o-Meter for bonds: How the new colour-coded system will help investors assess risk
Sebi has mandated a new colour-coded Credit Risk-o-Meter for all debt securities. This tool aims to provide transparent risk assessment to investors prior to investments. It categorizes risk levels with distinct colors representing credit ratings. Additionally, issuers must comply with standardized disclosures regarding unsecured bonds. This initiative is expected to enhance investor understanding and facilitate informed decision-making in the bond market.
Trump Mobile breach reportedly exposes personal data from 3,615 users: Who hacked the firm and how?
Trump Mobile, launched by Donald Trump's sons, has recently suffered a data breach affecting over three thousand customers. A cybercrime group named BYOD claimed responsibility for the hack, which exposed personal data including names and contact details. The group reportedly gained access through an employee of Liberty Mobile, the network operator supporting Trump Mobile.
Hacked FBI data has sensitive information about employees' intelligence roles
In a statement, the FBI said it was aware of "a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information." The bureau said the cause of the breach was still undetermined, but that it was "actively and aggressively investigating the matter."
Cybercrime feud erupts on dark web as notorious group claims hijack of rival's website
One of the world's best-known cybercrime groups said on Sunday it had hijacked one of its chief rivals' dark web site, bringing what it said was a long-simmering feud out into the open.
At least 20% cybercrimes involve dark web usage by attackers: report
The study is based on a detailed analysis of several cases of cybercrime reported across the country, said Khushhal Kaushik, founder and CEO of Lisianthus Tech. The study was conducted on a sampling basis over a period of two months which concluded last week, he said.
The proliferation of hacking as a service is giving cybersecurity experts nightmares
Anyone can be targeted. As tech spreads its wings, we become more vulnerable to Black Hats and Grey Hats.
A day in the life of a cybersecurity analyst: Identifying threats, finding solutions & keeping data safe
From identifying weaknesses in security approach to mitigating risks, the job is a challenging one.
You can easily subscribe, launch ransomware attack
According to security solutions firm Symantec, India was one of the top countries to be affected by ransomware till the first half of 2017, accounting for 4% of all attacks.
Load More
