VULNERABLE USERS
Tata Motors PV says CERT-In-flagged app vulnerabilities addressed through updates
The vulnerabilities identified in the iRA 2.0 and iRA.ev applications have been addressed through software updates and enhanced security measures, a Tata Motors Passenger Vehicles spokesperson told.
eMudhra says TLS certificate security incident impacted 1% of revenue
eMudhra Ltd experienced a certificate security incident in October that impacted its TLS business revenue significantly. Following the incident, the company revoked the affected intermediary certificates to prevent further issues. Executive Chairman V. Srinivasan confirmed that no end-entity certificates were issued, maintaining the integrity of the infrastructure. KPMG was appointed as an independent external reviewer to investigate the incident thoroughly.
Cert-In gets Mythos access, being careful with testing: Officials
Government agencies cannot download the AI’s source code or weights for running on their own, completely isolated or ‘air-gapped’ systems. Instead, to use Mythos, they must send their proprietary data, code, or network blueprints over the internet to Anthropic’s cloud servers.
From SBI to Binance, how financial institutions are becoming cyberattack targets
Recent incidents involving cryptocurrency exchange Binance and Indian public sector lender State Bank of India (SBI) have once again put the spotlight on the issue. While Binance reported a security breach involving unauthorised cryptocurrency withdrawals estimated at around $6.3 billion, SBI is investigating a suspected data leak involving nearly 3,900 customer records.
Why are supermarket fridges connected to the internet, and how are hackers exploiting them?
Recent cyberattacks on supermarket refrigeration systems in Belgium and France have exposed significant vulnerabilities. Around 40 Delhaize supermarkets and several others lost food worth about €100,000 due to the incidents. Researchers found nearly 13,000 vulnerable refrigeration management services accessible online across various countries. Many of these systems have outdated security measures, which increases the risks of unauthorized access.
Govt mulls giving Cert-In enforceable powers to mandate patching
Last month, two critical flaws in the PHP programming language, discovered with the help of AI, created worldwide panic as hackers targeted the vulnerabilities millions of times, and led to governments including the US, UK, France, Germany and Japan taking down public websites. PHP powers 69.3% of websites worldwide.

Smart fridge, security camera, video doorbell, router, car, thermostat: Everyday devices hackers can exploit and how to protect them
Cyberattacks involving supermarket refrigerators and freezers have raised concerns about the security of everyday internet-connected devices. From smart appliances and security cameras to routers, thermostats and connected cars, several products could be vulnerable to hacking. Here is what cybercriminals could do after accessing these devices and the precautions users can take to protect themselves.

Mistral AI publicly releases Large 4, targets cybersecurity users
Mistral said the released version was an upgrade from the one unveiled three weeks ago, following testing with governments and corporate users, which helped improve its performance.

TRAI proposes board-approved AI policies, risk classification and mandatory incident reporting for telecom operators
TRAI has proposed draft guidelines requiring telecom operators using AI to adopt board-approved policies, classify AI systems by risk and report critical incidents to the regulator. The framework also mandates AI governance committees, human oversight, impact assessments and inventories of AI systems, making telecom entities accountable for their AI-driven operations.

Global Market: Binance breach rekindles fears over cryptocurrency security
A reported $6.3 billion breach at Binance, described as the largest crypto heist on record, has renewed concerns about digital-asset security. Binance has located about $3 billion in affected assets and pledged to cover losses. The incident joins major attacks on Bybit, Ronin Network, Wormhole and other platforms, highlighting persistent vulnerabilities across exchanges, wallets, blockchain bridges and DeFi services.

From $1.46 billion in Ether being stolen to hackers returning money: Here’s a look at some of the largest crypto heists as Binance hit with largest in history
Binance has reported a significant hack that resulted in $6.3 billion being compromised. The company froze nearly $3 billion and promises to cover all losses incurred. Investigations indicate that a North Korean hacking group might be responsible for this breach. Additionally, other notable hacks in the cryptocurrency sector highlight ongoing vulnerabilities and the challenges faced by exchanges.

OpenAI CEO Sam Altman sees AI-led software overhaul amid PHP security concerns
The discussion comes just days after two critical security flaws in PHP were disclosed. PHP is a programming language that runs websites. It works behind the scenes. When a user loads a page, the server running PHP assembles the content and sends the finished page to the browser.

Google shares crash 13% after $9 billion cash burn sparks AI spending fears
Alphabet shares crashed 13% as third-quarter earnings missed expectations due to heavy AI spending and slowing search ad growth. Net profit fell 25% to $26.17 billion despite a 25% revenue jump to $127.58 billion. Negative free cash flow of $9.1 billion and surging capital expenditure raised market concerns.

UAE, Canada space firms in alliance as nations seek Starlink alternatives
Terrestar Solutions Inc. has entered into a partnership with Space42 Plc and Viasat Inc. to enhance mobile satellite connectivity. This collaboration aims to create an open standard for sharing satellite infrastructure globally. The parties signed a memorandum of understanding in Ottawa during an important diplomatic visit. Terrestar plans to develop a low-Earth orbit satellite system to improve coverage in underserved areas.

TMP Manipur, Meitei Alliance move Supreme Court over highway blockades, extortion
The petition names the State of Manipur, the Union of India through the Ministry of Home Affairs, and the National Highways Authority of India (NHAI) as respondents. It seeks comprehensive directions to prevent unlawful highway blockades, address extortion and unauthorised collections from highway users, and establish an effective mechanism to protect vital transport routes.

'I am so torn on what to do': Microsoft employee returning from maternity leave offered voluntary exit, turns to internet for advice
A Microsoft employee in Canada says she was offered a voluntary exit package worth around 10 months of pay just before her maternity leave ends. With nearly a decade at the company, plans for another child and concerns about layoffs and remote job opportunities, she sought advice online. Respondents discussed severance, savings, job searches and the risks of staying.

AI is finding software flaws faster, and so are hackers: Inside the PHP scramble
Governments and companies across Europe and Asia have taken services offline while they patch two vulnerabilities that researchers discovered with AI models, as exploitation attempts rise into the millions.

What to know about the AI-detected security bug impacting wide swaths of the internet
PHP is a widely used general-purpose scripting language that is geared toward web development, and thus, it powers the majority of websites around the world. When the organization behind the language and the FBI's cyber division warned Wednesday of significant vulnerabilities in the language, government agencies, corporations and other organizations were sent into a flurry.

What is a PHP vulnerability? Security flaws prompt shutdowns of major websites amid global cybersecurity response
Two critical vulnerabilities in PHP have prompted the shutdown of several websites across multiple countries. Cybersecurity teams are actively working to secure these potentially affected systems using emergency fixes provided by the PHP Foundation. Major organizations, including Wikimedia and government sites in Finland and the Netherlands, have taken precautions. Researchers utilized artificial intelligence to identify these security flaws, showcasing both its benefits and risks.
Load More
