VULNERABLE USERS
Tata Motors PV says CERT-In-flagged app vulnerabilities addressed through updates
The vulnerabilities identified in the iRA 2.0 and iRA.ev applications have been addressed through software updates and enhanced security measures, a Tata Motors Passenger Vehicles spokesperson told.
eMudhra says TLS certificate security incident impacted 1% of revenue
eMudhra Ltd experienced a certificate security incident in October that impacted its TLS business revenue significantly. Following the incident, the company revoked the affected intermediary certificates to prevent further issues. Executive Chairman V. Srinivasan confirmed that no end-entity certificates were issued, maintaining the integrity of the infrastructure. KPMG was appointed as an independent external reviewer to investigate the incident thoroughly.
Cert-In gets Mythos access, being careful with testing: Officials
Government agencies cannot download the AI’s source code or weights for running on their own, completely isolated or ‘air-gapped’ systems. Instead, to use Mythos, they must send their proprietary data, code, or network blueprints over the internet to Anthropic’s cloud servers.
From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.
Why are supermarket fridges connected to the internet, and how are hackers exploiting them?
Recent cyberattacks on supermarket refrigeration systems in Belgium and France have exposed significant vulnerabilities. Around 40 Delhaize supermarkets and several others lost food worth about €100,000 due to the incidents. Researchers found nearly 13,000 vulnerable refrigeration management services accessible online across various countries. Many of these systems have outdated security measures, which increases the risks of unauthorized access.
Govt mulls giving Cert-In enforceable powers to mandate patching
Last month, two critical flaws in the PHP programming language, discovered with the help of AI, created worldwide panic as hackers targeted the vulnerabilities millions of times, and led to governments including the US, UK, France, Germany and Japan taking down public websites. PHP powers 69.3% of websites worldwide.
- Go To Page 1
Binance’s $6.3 billion hack dwarfs Bybit's $ 1.5 billion breach: Is cryptocurrency theft getting bigger?
Binance has recently reported a major security breach impacting approximately $6.3 billion in digital assets. After the hack, the exchange temporarily suspended withdrawals while assessing their security systems. Hackers allegedly linked to North Korea have raised concerns about the effectiveness of security measures in cryptocurrency exchanges. Investigators are working to trace the stolen funds and recover as many assets as possible.
Smart fridge, security camera, video doorbell, router, car, thermostat: Everyday devices hackers can exploit and how to protect them
Cyberattacks involving supermarket refrigerators and freezers have raised concerns about the security of everyday internet-connected devices. From smart appliances and security cameras to routers, thermostats and connected cars, several products could be vulnerable to hacking. Here is what cybercriminals could do after accessing these devices and the precautions users can take to protect themselves.
Mistral AI publicly releases Large 4, targets cybersecurity users
Mistral said the released version was an upgrade from the one unveiled three weeks ago, following testing with governments and corporate users, which helped improve its performance.
TRAI proposes board-approved AI policies, risk classification and mandatory incident reporting for telecom operators
TRAI has proposed draft guidelines requiring telecom operators using AI to adopt board-approved policies, classify AI systems by risk and report critical incidents to the regulator. The framework also mandates AI governance committees, human oversight, impact assessments and inventories of AI systems, making telecom entities accountable for their AI-driven operations.
Global Market: Binance breach rekindles fears over cryptocurrency security
A reported $6.3 billion breach at Binance, described as the largest crypto heist on record, has renewed concerns about digital-asset security. Binance has located about $3 billion in affected assets and pledged to cover losses. The incident joins major attacks on Bybit, Ronin Network, Wormhole and other platforms, highlighting persistent vulnerabilities across exchanges, wallets, blockchain bridges and DeFi services.
From $1.46 billion in Ether being stolen to hackers returning money: Here’s a look at some of the largest crypto heists as Binance hit with largest in history
Binance has reported a significant hack that resulted in $6.3 billion being compromised. The company froze nearly $3 billion and promises to cover all losses incurred. Investigations indicate that a North Korean hacking group might be responsible for this breach. Additionally, other notable hacks in the cryptocurrency sector highlight ongoing vulnerabilities and the challenges faced by exchanges.
OpenAI CEO Sam Altman sees AI-led software overhaul amid PHP security concerns
The discussion comes just days after two critical security flaws in PHP were disclosed. PHP is a programming language that runs websites. It works behind the scenes. When a user loads a page, the server running PHP assembles the content and sends the finished page to the browser.
Google shares crash 13% after $9 billion cash burn sparks AI spending fears
Alphabet shares crashed 13% as third-quarter earnings missed expectations due to heavy AI spending and slowing search ad growth. Net profit fell 25% to $26.17 billion despite a 25% revenue jump to $127.58 billion. Negative free cash flow of $9.1 billion and surging capital expenditure raised market concerns.
Chinese AI model carries out complex cyberattacks in controlled tests, researchers say
Chinese firm Z.AI's flagship AI model carried out complex cyberattacks in controlled simulations and repeatedly ignored instructions in separate tests, according to a report by AI security research firm Irregular.
Meesho Q2 loss narrows; Info Edge names Sanjeev Bikhchandani CEO
Happy Thursday! Meesho’s losses shrunk as revenue grew in the second quarter of FY27. This and more in today’s ETtech Morning Dispatch.
UAE, Canada space firms in alliance as nations seek Starlink alternatives
Terrestar Solutions Inc. has entered into a partnership with Space42 Plc and Viasat Inc. to enhance mobile satellite connectivity. This collaboration aims to create an open standard for sharing satellite infrastructure globally. The parties signed a memorandum of understanding in Ottawa during an important diplomatic visit. Terrestar plans to develop a low-Earth orbit satellite system to improve coverage in underserved areas.
TMP Manipur, Meitei Alliance move Supreme Court over highway blockades, extortion
The petition names the State of Manipur, the Union of India through the Ministry of Home Affairs, and the National Highways Authority of India (NHAI) as respondents. It seeks comprehensive directions to prevent unlawful highway blockades, address extortion and unauthorised collections from highway users, and establish an effective mechanism to protect vital transport routes.
'I am so torn on what to do': Microsoft employee returning from maternity leave offered voluntary exit, turns to internet for advice
A Microsoft employee in Canada says she was offered a voluntary exit package worth around 10 months of pay just before her maternity leave ends. With nearly a decade at the company, plans for another child and concerns about layoffs and remote job opportunities, she sought advice online. Respondents discussed severance, savings, job searches and the risks of staying.
iPhone Duo teardown examines display issues, dust protection and repair costs
Some users of the iPhone Duo have reported issues with inner display cracks and bright lines. An iFixit teardown highlighted potential reasons for these failures
Japanese companies compensate users as cyberattacks buffet economy
GMO Internet Group said customers would be compensated for losses stemming from unauthorised access following a cyberattack on its foreign exchange trading service, and all customers would receive 5,000 yen ($32) as "an initial gesture of good faith," CEO Masatoshi Kumagai said in a blog post on Sunday.
Delhi-NCR parents plan to buy classroom air purifiers for kids as smog season approaches
With Delhi-NCR's smog season approaching, parents at a leading school are reportedly considering pooling money to buy air purifiers for nursery classrooms. A viral post by Anirudh Arun has sparked debate over the school's existing filtration arrangements, the movement of purifiers between grades and who should be responsible for protecting children from air pollution.
AI is finding software flaws faster, and so are hackers: Inside the PHP scramble
Governments and companies across Europe and Asia have taken services offline while they patch two vulnerabilities that researchers discovered with AI models, as exploitation attempts rise into the millions.
Moonshot curbs hacking ability in new Kimi model as fears grow over AI-powered cyberattacks
Beijing-based Moonshot announced the curbs while introducing Kimi K3.1 Pro, which it describes as its most capable 3-trillion-parameter-class open-weight model. The company plans to publish the model's weights - files allowing outside developers to run and modify it on their own systems - by November 4.
What to know about the AI-detected security bug impacting wide swaths of the internet
PHP is a widely used general-purpose scripting language that is geared toward web development, and thus, it powers the majority of websites around the world. When the organization behind the language and the FBI's cyber division warned Wednesday of significant vulnerabilities in the language, government agencies, corporations and other organizations were sent into a flurry.
AI-discovered bugs may soon trigger fresh disruptions, cyber experts say
AI helped drive a doubling of the number of digital flaws discovered year-on-year, according to research due to be published in the coming days by VulnCheck, a Massachusetts-based threat intelligence firm.
What is a PHP vulnerability? Security flaws prompt shutdowns of major websites amid global cybersecurity response
Two critical vulnerabilities in PHP have prompted the shutdown of several websites across multiple countries. Cybersecurity teams are actively working to secure these potentially affected systems using emergency fixes provided by the PHP Foundation. Major organizations, including Wikimedia and government sites in Finland and the Netherlands, have taken precautions. Researchers utilized artificial intelligence to identify these security flaws, showcasing both its benefits and risks.
Cloudflare sees millions of exploit attempts after PHP disclosure
Cloud services firm Cloudflare saw millions of exploitation attempts after the public disclosure of critical vulnerabilities in the widely used programming language PHP, CEO Matthew
Multiple websites go offline after critical PHP security flaw; FBI urges immediate updates. Here's what you should do
In light of critical vulnerabilities discovered in PHP, numerous websites have been taken offline. The FBI has strongly recommended that organizations either update their PHP installations or disconnect vulnerable systems. Cybersecurity experts warn that these flaws pose a significant risk of data theft and cyberattacks. In response, website administrators are implementing urgent maintenance. Users are encouraged to exercise caution and adhere to online safety protocols.
Load More
