DATA BREACHES
Companies need to overhaul cybersecurity as AI accelerates vulnerability attacks: Report
Companies will need to fundamentally overhaul their cybersecurity strategies and increase investments in automated threat detection and vulnerability management as frontier artificial intelligence (AI) makes it easier for cyberattackers to identify and exploit software weaknesses, according to a McKinsey report.
Activists breach Microsoft data centre construction site as protests spread in Europe
Activist groups have announced actions in 16 countries on Friday and Saturday, according to the "Stop Dirty Data Centres" coalition, which is rallying environmental groups and digital rights campaigns behind calls to pause large-scale construction.
Asia fuel oil benchmarks slump as market prices in potential Iran war de-escalation
Asian fuel oil benchmark prices underwent a steep decline this week, driven by expectations of heightened supplies from the Middle East. The shifting political landscape in the US Congress has ignited hopes for peace talks in the region. Simultaneously, enhanced supply conditions, particularly from UAE fuel oil exports, have emerged. While freight rates have shown some easing, they still exert pressure on cargo movements from Europe to Asia.
India flags Chinese-linked AI tools in hacking campaign against financial firms
India's cybersecurity agency named the hacking group behind a wave of AI-driven attacks on financial firms and identified its tools, at least two of them linked to China, adding India to a growing list of countries where
Arm beats second-quarter revenue estimates on AI and data-center demand
Arm said its server-chip architecture accounted for more than 50% of deployments at major cloud providers in 2025 and is expected to exceed 60% by the end of 2026.
AI turns cyber threat into boardroom crisis
In India, State Bank of India disclosed that 375,000 customer records had been leaked on the dark web, while vulnerabilities in eMudhra’s digital certificate keys exposed websites to potential attacks.
- Go To Page 1

eMudhra says TLS certificate security incident impacted 1% of revenue
eMudhra Ltd experienced a certificate security incident in October that impacted its TLS business revenue significantly. Following the incident, the company revoked the affected intermediary certificates to prevent further issues. Executive Chairman V. Srinivasan confirmed that no end-entity certificates were issued, maintaining the integrity of the infrastructure. KPMG was appointed as an independent external reviewer to investigate the incident thoroughly.

Singapore Airlines says 46,000 booking records affected by Amadeus breach
Singapore Airlines said on Tuesday that about 46,000 booking records may have been affected by a cybersecurity incident involving Amadeus, its reservation technology

Stockal scam: Trading platform says unauthorised third party accessed customer accounts
Stockal has disclosed that unauthorized trading practices impacted 13 client accounts, resulting in notable financial losses. Investors claim their assets were liquidated without consent, redirecting funds towards unauthorized transactions. An investigation revealed there was no compromise within Stockal's systems; however, it points to a likely social engineering incident. Affected investors have reached out to regulatory bodies in India and the U.S.

From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.

SBI hunts for weak links after suspected cyberattack exposed 3,897 customer records
State Bank of India (SBI) is investigating a suspected cyberattack that may have exposed 3,897 customer records, with root cause analysis still underway. The bank is focusing on containing the breach and fixing vulnerabilities after customer information, including names, contact details and loan records, appeared on the dark web.

South Korean president, first lady and national security adviser passport information leaked online along with 165 other people?
South Korean president Lee Jae Myung, first lady Kim Hea Kyung and national security adviser Wi Sung-lac passport information seems to have leaked online along with 165 other people, a report said. The passport details and personal details of presidential security staff have also leaked. According to broadcaster KBS, an Excel file containing the personal details was uploaded onto a paid malware scanning website in June.

Digital payments firms race to fortify defences as cyberattacks intensify
At Bengaluru-based Cashfree, attempted attacks have been taking place repeatedly over the past three weeks, occurring at least 10 times as frequently as a year ago, chief technology officer Ramkumar Venkatesan told ET. Attackers are increasingly combining multiple vulnerabilities to attack systems, he said.

Cyberattacks on banks, including AU Small Finance Bank, worry insurers as claim risks rise
Cyberattacks targeting financial institutions have raised concerns about security vulnerabilities and potential losses. AU Small Finance Bank is investigating a possible data breach involving customer information stored on Salesforce. Insurers have recently reported an increase in cyber incidents affecting banks and manufacturers over the past few months. The extent of these breaches and the impacted customer count are still under investigation.

AU Small Finance Bank data leak: Salesforce says no vulnerability at its end
Salesforce has stated no vulnerabilities were found concerning a suspected data leak at AU Small Finance Bank. The bank is investigating claims of a breach by hackers, affecting sensitive customer data. Reportedly compromised information includes KYC records and personal identification documents, while the bank assures its core systems are unaffected. Prime Minister Narendra Modi recently warned of increasing cyberattack threats to the economy.

Largescale cyberattacks test the limits of insurance cover
While businesses rush to enhance their cyber insurance cover, the incidents have triggered a debate over whether existing policies adequately cover emerging cyber risks. The biggest question insurers are policyholders seem to be confronting is: who pays when a vulnerability exposes thousands of organisations to the same threat?

AU Small Finance Bank hit by a likely breach of 'limited' data
The lender is investigating a potential breach of "limited data" pertaining to its vehicle-loan customers. The data was hosted on a third-party software platform operated by Salesforce.

Cathay Pacific reports personal data security incident involving Amadeus IT
Cathay Pacific Airways has reported a data security incident linked to a third-party service provider. The incident reportedly affected around 53,000 bookings associated with the airline, due to unauthorized access to Amadeus' systems. Personal information such as booking references, passenger names, and flight details were accessed during the breach. However, investigations continue, and there is no evidence of access to financial or payment information.

DHS data leak: Agency responds after massive breach exposes details of 41,000 officials, including ICE personnel
DHS data leak: A recent data breach exposed personal information of 41,000 Department of Homeland Security officials, which was published online. The hacktivist group, Department of Peace, claimed responsibility, stating that the information was obtained from Okta's system. The leaked data contains employee names, offices, contact information, and their specific assignments within the agency. Department of Homeland Security is actively addressing this situation and has acknowledged the potential breach.

41,000 US Homeland Security employee names leaked in major hack
A significant data breach has exposed personal details of more than 40,000 Department of Homeland Security employees. The leaked information includes identities, contact details, and job titles of various officials. Distributed Denial of Secrets claims responsibility for releasing the data, asserting a right to access such information. The Department of Homeland Security confirmed it is actively addressing the breach while ensuring employee protection.

AT&T data breach settlement checks: Who gould get $5,000 and why others may receive less than $10
AT&T settlement checks: AT&T customers who filed claims under the $177 million data breach settlement could receive up to $5,000 for documented losses, while tiered cash payments may be much smaller. With final court approval granted, claimants are waiting for a confirmed payment date. The filing deadline passed in December 2025.

Italian PM Giorgia Meloni's email targeted in cyberattack on Italian lower house
Prime Minister Giorgia Meloni's email account was among those targeted in a cyberattack on the IT systems of Italy's lower house of parliament in recent days, a source in the assembly said on Tuesday.

Alibaba AI model secretly tried to reach Beijing server in test, rival Cohere says
Canadian AI company Cohere said on Monday one of Alibaba's Qwen AI models tried to send data to an Alibaba Cloud storage server in Beijing during a security test. The model made the attempt even though its own reasoning indicated it would not do such a thing, Cohere said.

Clock’s ticking for data protection, but the boardroom remains empty
Under the Digital Personal Data Protection (DPDP) Rules, 2025, the framework for registering consent managers with the DPBI is scheduled to start on November 13. But a government response to a Right to Information (RTI) application shows that the board spent not a single rupee on salaries, office expenses, rent or information and communication technology equipment as of September 30 this year.

AT&T Settlement: Millions of Americans may get $5,000 checks. Check eligibility and other details
A landmark $177 million settlement has been sanctioned regarding a class-action lawsuit against AT&T, prompted by data breaches that took place in March and July 2024. Customers whose sensitive information was compromised are eligible to file claims until December 2025. Compensation payments are anticipated to begin in December 2026, with many claimants expected to receive funds by early 2027.

Japan PM vows swift response to wave of cyberattacks
Japan is preparing an emergency cybersecurity package in response to increasing hacking incidents affecting various businesses. Prime Minister Sanae Takaichi announced at a cabinet meeting that unauthorized access has raised concerns about data leaks. The government aims to compile these emergency measures within the next week to address the issue effectively. A Chinese AI tool called Artex has been linked to several recent hacking incidents.

Rogue AI agents exposing India’s data law blindspots
As companies edge closer to the May 2027 enforcement deadline for the Digital Personal Data Protection (DPDP) law, AI’s emerging cybersecurity risks are creating tension over what might constitute adequate compliance just six to seven months from now.

Rush is on to patch a software vulnerability that could impact 70% of websites worldwide
Many government sites appeared to be functioning normally Thursday, but outages or limited service continued while security work was under way.

SBI data leak: Is your bank account safe? What was breached and should you worry?
SBI bank data breach: Country's largest bank, SBI, is investigating a suspected data leak involving nearly 4,000 customer records identified on the dark web. Here is what information was exposed, whether your bank account is safe and the precautions customers should take.
Load More