CERT-In says CRAFTY FALCON is hitting Indian fintech payment APIs
Remediated firms were attacked again on holidays, and CERT-In has not named the actor or victim count.
Stories per day · 30 days
4 RSS
Relatedcert-in7banking6android5sbi5ai-agents4banking-trojan4data-breach3data-leak3emudhra3ghostbat3smishing3tls3unauthorized-access3upi3accessibility-abuse2agent-security2banking-malware2breachforums2
49 stories, newest first · one card per story
Stories tagged #india
Black Hat India 2026 ends inaugural Bengaluru conference
The October 27–30 event included 13 trainings, 70-plus summit speakers and 44 open-source tool demos.
Google launches Dreambeans in India
Google expanded its experimental AI app Dreambeans to India with support for 13 local languages.
1
MR ROBOT Android MaaS rents bank trojans aimed at Indian customers
CloudSEK says one affiliate’s data held 5,407 texts from 153 devices, with call forwarding on 58 percent.
1
Banking trojans infect 17,960 Android phones in India
Group-IB says seven families intercepted 7,611,443 SMS messages and stole cards, OTPs, and identity data.
1
CyberDakait malware hits 17,960 Indian banking Android devices
Operators intercepted 7,611,443 SMS messages and paired credential theft with XMRig mining on idle phones.
2
IFAAB audit finds GPT-4o financial-advice gaps for Indian personas
Male-labelled profiles received 60.1% higher initial resources and 46.8% higher post-advice resources than female-labelled ones.
Bajaj Hospital servers encrypted overnight; Crypto 24 named
Billing and the hospital management system failed at 3 a.m., and a note said the ransom would rise if police were called.
1
Nvidia backs Simplismart’s $14 million round for leaner AI inference
The all-primary Series B values the Bengaluru startup at about $100 million, with Dallas Venture Capital leading.
1
India film board probes exposure of records for 500+ titles
Scripts, cut orders and distribution deals from e-Cinepramaan were reportedly downloadable on the Internet Archive for several days.
1
Indian government sites still serve revoked eMudhra certificates
Of 8,947 IGOD hosts checked on October 23, 156 still presented certificates revoked on October 19.
India SIM-binding rules may block WhatsApp without a registered SIM
Covered apps have until December 31, 2026, with the requirement expected to take effect on January 1, 2027.
1
India to require WhatsApp and Telegram accounts to stay tied to active SIMs
DoT’s deadline is December 31, 2026; how far accounts stop working depends on each app’s implementation.
eMudhra issued TLS certificates with private keys of 3 to 8 bits
Eight P-384 keys held only a handful of bits of entropy, so a network attacker could impersonate the certificate holder.
SBI notifies customers whose data was in a cyber incident
The bank says balances and funds are safe but gives no cause, data types, customer count or date.
SBI notifies customers after finding 3,897 records exposed
SBI reviewed about 375,000 dark-web records and says balances are safe, with no confirmed core-system intrusion.
Attacker used DeepSeek to steal 5,200 Indian university records
Unit 42 says a weak administrator password, not a new software flaw, exposed the MongoDB holding student and staff data.
State Bank of India discloses leak of 3,897 customer records
BreachForums user Siriusim posted SBI files, while the bank reported a much smaller official count.
1
BUGSTER used jailbroken AI to hit Indian universities, Unit 42 says
The actor dumped more than 5,200 student records and planned VoIP fraud, Wi-Fi cracking, and crypto reconnaissance.
1
State Bank of India confirms 3,897 customer records on dark web
The October 21 filing says authenticity and the source remain unknown, and listed fields omit account numbers, passwords and Aadhaar.
eMudhra CA private keys compromised, one was the number 4
Mozilla, Chrome and Apple are distrusting eight intermediates after keys such as 4, 56 and 115 were recovered in under a second.
1
Siriusim claims leak of State Bank of India customer records
The unverified post cites 375,000 CSV rows and 2,722 PDFs, not a confirmed unique-customer count.
Unverified BreachForums post claims leak of SBI customer records
Siriusim allegedly posted 375,000 CSV rows and 2,722 PDFs; SBI had not confirmed the claim.
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
CERT-In says AI agents accessed Indian organizations' confidential data that the victims never detected.