The Ministry of Cyber Affairs

OpenAI disclosed user content, including text and files entered into or generated by its services, in response to 88 government requests in January–June 2026, covering 130 accounts. The company received 146 content requests, typically search warrants, and produced data in about 60 percent of them, plus 620 non-content requests for subscriber records. Ordinary requests more than doubled from late 2025. No country breakdown is given. U.S. national security demands totaled 250–499.

India's Enforcement Directorate has arrested Sagar Dash, founder of Armstrong Exchange Pvt Ltd, in its money laundering probe into the All Panel Exchange (APX) betting platform. ED alleges victims' money moved through mule accounts at Jubilee Hills Mercantile Co-operative Bank, Hyderabad, and shell firms into an account at Nagarbhavi Credit Co-operative Society, Bengaluru, and that Dash used the society's KYC and forged papers to open a crypto account. About $960,000 is frozen.

India's Enforcement Directorate has provisionally attached assets worth about $1.5 million (Rs 14.16 crore) in the HashPe cryptocurrency investment case and filed charges before a special money laundering court in Puducherry. Run through hashpe.io and a multi-level marketing network, the scheme raised about $12 million by promising 1% daily returns, trading fictitious coins and paying earlier investors with new money. Four accused are in judicial custody.

India's I4C asked Google on 5 Nov 2026 to remove eight Play Store loan apps. Victims report 7-day terms instead of the 91-365 days advertised, about 40% deducted upfront, contact harvesting and extortion with morphed photos. The apps belong to three separate operations, one with Chinese-language code and a hidden silent-photo function. Four look-alikes still on Play request SMS access, and FlexiBee's replacement uses Beijing-made SDKs despite claiming it collects no data.

The United Nations Office on Drugs and Crime (UNODC) is recruiting a temporary P-3 Programme Officer (Migrant Smuggling and Cybercrime Investigation) in Rabat, Morocco, for 11 months. The officer will deliver cyber-investigation training and technical assistance to African law enforcement and justice agencies under an EU-funded project. Applicants need a Master's degree in a relevant field and five years of cybercrime experience. Applications close on 23 November 2026.

The Unique Identification Authority of India (UIDAI) has issued its amended Internship Policy, 2025, opening internships of six weeks to 12 months at its Head Office, Technology Centre in Bengaluru, and Regional and State Offices. Students and recent graduates with at least 60% marks in technology, law, commerce, management and other fields, plus PhD scholars, are eligible, with monthly stipends from Rs 20,000 to Rs 50,000.

Thailand arrested eight Chinese nationals on 9 November 2026 in a Nong Prue, Pattaya, villa raid over a Douyin romance-and-investment scam targeting Chinese victims, with operators posing as army generals. All eight had entered illegally; four were wanted in China. Two Myanmar housekeepers were also detained. Seizures included two laptops, 32 phones and 178-plus SIM cards. Loss figures conflict: a still-unverified 300-million-baht estimate, or about 350 million baht in recorded transfers.

The RCMP said on 9 November 2026 that Maple Disruption 2.0, organized by its National Cybercrime Coordination Centre and the Canadian Anti-Fraud Centre from 2 to 6 November, saw partners from more than 50 organizations carry out 10,987 disruptive actions against fraud and cybercrime tools. Officials said 4,264 fraud reports were actioned and $1,063,809 was recovered. The release named no accused and announced no charges.

On 9 November 2026, France’s C4 (ANSSI, COMCYBER, DGA, DGSE, DGSI) and the Foreign Ministry attributed the 11–12 October sabotage of refrigeration controllers at about 700 French retail sites to IRGC unit Shahid Kaveh, citing fires, food losses and a bundle of technical indicators.

After Cambodia, Has Sri Lanka Become the Scam Networks' New Home?

The group, including five women, was removed via a special flight from Techo International Airport on 7 November in a joint operation with the Chinese Embassy.

Google’s UK Mobile Bi-annual Transparency Report (published 30 September 2026) covers 1 April–30 June 2026: 621,464 Play apps removed and 18,145 developer accounts terminated for policy violations, plus 7,104,152 submissions reviewed and 446,593 rejected. The UK title does not define the geographic coverage of the metrics.

Navi Mumbai Cyber Police registered a case after Mirae Asset Financial Services (India) alleged Rs 8,92,56,160 was siphoned in four hours on 28 Oct 2026 via 583 fictitious loans and 438 disbursements, with product code PLNMAKS linked to partner Kissht. FIR number not published.

Meta reported 52 million Facebook fraud-and-scam content actions and 2.06 billion fake-account removals in January–June 2026. The figures measure different enforcement activities—not victims or unique people—and cannot be added together. Its global transparency report leaves important questions about fraud exposure and protection unanswered.

The Enforcement Directorate has searched three Bengaluru premises linked to CoinDCX and Delta Exchange under FEMA, 1999, over alleged unauthorised cross-border crypto transactions. The ED said INR deposits were converted to USDT and routed through a Costa Rica paper entity to Binance, KuCoin, Bybit, Gate.io and Hyperliquid for spot, futures and options, and tokenised foreign stock trades, with volumes running into thousands of crores of rupees.

Bhadrak Police in Odisha have arrested SIM agent Subhamjyoti Nayak, 23, accused of activating SIM cards in unsuspecting people's names and supplying their OTPs over WhatsApp and Telegram to cyber fraudsters allegedly operating from China. Police seized 1,333 activated SIM cards, 13 bank passbooks and Rs 1.73 lakh in cash. The gang allegedly misused Vodafone Idea and BSNL agent IDs and moved money through Binance. Five suspects are absconding.

CyberStrike is a free, open-source AI agent for offensive security that pairs any LLM with 56+ tools, including a 40,000-line Windows post-exploitation module. A source-code reading of commit a5ed1e0 (v1.1.16) shows every Windows action runs through five fixed wrappers after a hard-coded five-process capability probe, leaving default cs-* and CyberStrike* artefacts. Includes Sigma, Suricata, YARA and KQL detections and a response playbook.

Google Threat Intelligence Group and Mandiant say threat actors are now using agentic offensive frameworks such as ARTEX and PentAGI in real intrusions, moving from first stolen account to deep access in hours, sometimes 15 minutes. With CERT-In already warning of AI-assisted payment API hijacking at Indian NBFCs and fintechs, here is a checklist built on Google's five defence layers and CERT-In's controls.

India's Computer Emergency Response Team (CERT-In) held a full-day cybersecurity exercise and drill for the banking, financial services and insurance (BFSI) sector on 27 October 2026. More than 300 officials from over 55 institutions took part, mostly Regional Rural Banks and Cooperative Banks. The drill focused on detecting and countering AI-enabled attacks, including automated discovery and exploitation of vulnerabilities.

Prime Minister Narendra Modi said India must protect its banking system from "cyber looters and cyber terrorists" as he inaugurated RBI's new Data Centre and Cybersecurity Training Institute in Bhubaneswar. The warning follows a string of API-driven heists at NBFCs and payment fintechs, and two critical CERT-In advisories in October.