-
CERT-In has warned banks, NBFCs and fintech firms about escalating AI-driven 'Crafty Falcon' cyberattacks. Hackers are exploiting banking APIs, system vulnerabilities and compromised credentials to execute fraudulent fund transfers, increasingly timing operations during weekends and holidays
-
A cybersecurity researcher flagged an IDOR vulnerability in the Telangana State Dental Council portal that exposed dentists’ personal details and academic documents. The affected section was taken offline after public criticism, prompting concerns over data protection and accountability.
-
OpenAI said its AI agents weakened and disabled alerts in an internal monitoring system designed to detect misbehaviour, prompting a review of potential monitoring avoidance. The company plans stricter safety measures, while a separate incident involves an employee facing federal charges
-
State Bank of India confirmed that 3,897 customer records containing personal information were identified during a preliminary analysis of data found on the dark web. The lender has launched an investigation and said the incident has not disrupted core business operations
-
South Korean banks are planning to increase cybersecurity spending and personnel following AI-assisted hacking attacks that exposed customer data. Shinhan, Hana and KB Kookmin banks are strengthening security measures as authorities investigate breaches and expand the probe into cyberattacks
-
India’s tech industry faces a 53–60 per cent talent gap in GenAI and Cloud, with only 16 per cent of IT professionals possessing AI skills, a TeamLease Digital report said. GenAI demand is expected to exceed 10 lakh roles by 2026
-
OpenAI has scrapped the planned October release of its new AI model, GPT-6.1 Astra, after safety tests found it could exceed user instructions and provide unreliable accounts of its actions. The decision underscores growing concerns over AI agents' ability to stay within authorised tasks and transparently report their activities.
-
Meta revealed that its AI model Muse Spark 1.1 accessed the internet and exploited a vulnerability in an external service during cybersecurity testing due to a misconfigured environment. The incident adds to growing concerns over AI models' capabilities and safety controls
-
Bank of Baroda has assured customers that its core banking systems remain secure after an employee's email account was compromised, leading to unauthorised data access. The bank has launched a forensic investigation amid reports that sensitive customer information surfaced on the dark web
-
The Digital Threat Report 2025-26 warns that India’s banking and financial services sector faces a radically new cyber threat environment. Traditional centralized security models are inadequate for today’s interconnected platforms, AI-driven decision-making, and real-time payments.
-
CERT-In has warned of a large-scale malware campaign targeting WhatsApp Web and Desktop users through malicious VBScript attachments sent from compromised accounts. Users are advised to avoid opening unexpected files and verify suspicious messages to prevent device compromise and data theft
-
A World Economic Forum delegation met Andhra Pradesh Chief Minister Chandrababu Naidu to discuss the roadmap for India’s first thematic Centre for the Fourth Industrial Revolution. Discussions focused on green energy, cybersecurity, digital transformation and infrastructure development linked to the state’s clean energy ambitions
-
Indian small businesses recorded their strongest growth since 2019 in 2025, according to CPA Australia’s survey. The report highlighted rising optimism for 2026, strong digital adoption, increasing AI investments and continued employment growth despite mounting cost and cybersecurity challenges
-
Finance Minister Nirmala Sitharaman said Indian banks are prepared for tech risks but warned about threats from Anthropic’s Mythos AI, with Ministry of Electronics and Information Technology monitoring impacts and urging stronger safeguards
-
Cybersecurity breaches have emerged as the top risk to organisational performance for India Inc, followed by changing customer expectations and geopolitical events, according to a FICCI–EY survey that highlights growing concerns over technology, AI governance and operational resilience.
-
CERT-In has flagged a high-severity WhatsApp vulnerability called GhostPairing, which allows attackers to hijack accounts via the device-linking feature. Cyber criminals can access messages, photos, and videos without passwords or SIM swaps. Users are advised to avoid suspicious links
-
The Indian government’s increased push for sovereign control over digital infrastructure has already curtailed individual freedoms in the country
-
The Centre has withdrawn its order directing smartphone makers to pre-install the Sanchar Saathi cybersecurity app, citing a ten-fold rise in voluntary downloads. The November 28 mandate had stirred political controversy, with opposition parties alleging potential snooping risks
-
Communications Minister Jyotiraditya Scindia told Lok Sabha that the Sanchar Saathi app cannot enable snooping and exists solely to protect users. Amid criticism of mandatory pre-installation on all smartphones, he said the app empowers citizens and can be deleted if unwanted
-
India has mandated active SIM linkage for messaging apps such as WhatsApp, Telegram and Signal, citing rising digital fraud. While telecom operators have welcomed the move for enhancing traceability, major tech firms have urged the government to pause implementation and review legal concerns
