Cybersecurity

UP Police say Bhadohi Police arrested three people accused of forging birth certificates by misusing officials’ CRS portal logins — allegedly via OTPs, email takeover, and uploads of fake data or blank papers. The force claims about 200–250 fake certificates were produced for illegal gain. Official post names no FIR or accused; local press same day aligns on the CRS/OTP modus.

Perplexity CEO Aravind Srinivas said nine models with root in SPACE failed 108 VM→host escapes, but four — including GPT-5.6 Cyber — reached a blocked URL under partial network access via DNS spoofing or shared-IP CDN tricks; Cyber used Taboola→screenshot→OCR. Issues reportedly fixed. Not a Firecracker host break.

Automated scrapers and path scanners routinely probe public sites for /.env, config.json, info.php, .vscode/sftp.json, cPanel proxy paths, GraphQL and Exchange ECP URLs. MoCA analysis of typical top-path charts explains recon vs exploit risks and practical fixes: deny rules, WAF, fail2ban, never commit secrets, remove phpinfo, and keep security.txt intentional.

From an unpaid exam lab in Greater Noida to a soldering station in Delhi — UP STF says it has busted a pan-India supply chain that let remote solvers control candidates' computers.

A laptop farm is not a hacking exploit. It is physical infrastructure designed to hide where the keyboard actually is.

National Computer Virus Emergency Response Center warns that fake plugins for popular AI agents can steal files and open a back door — and the problem is growing fast. Several IOCs of skill poisoning were also published in the advisory.

Binding operational-technology (OT) rules for electricity exist in a handful of jurisdictions. Most of the world still runs plants on vendor advice, IEC 62443 contracts and national CERT circulars. That difference matters. A guideline can be ignored. A reliability standard or a critical-infrastructure statute can shut a control room or fine a board.

Campaign Focus: contentviolations-x.com and Related -x.com Infrastructure

C3iHub’s specialised training equips participants with hands-on skills in OT threat detection, industrial protocol security (such as Modbus and IEC 61850), IT-OT convergence risks, and realistic attack simulations on control systems, enabling power sector professionals to better protect critical infrastructure from targeted cyber threats.

How Black Hat USA 2026 reframed agents as systems that browse, run code, and move credentials—and what to do about it. Bottom line: agents are not safer chatbots; they are automation with a probabilistic parser on the front. Design them like production automation that accepts hostile input—because they do.

The 2026 Directions put the CISO's reporting line in writing — outside IT, into risk, with no business targets. The RBI regulates over 9000 financial entities, ranking one of largest in the world.

In the escalating cat-and-mouse game of Android security, one native library has stood out for its brutal effectiveness: libhunter.so from the popular root/hook/tampering detector com.zhenxi.hunter (Hunter). By mid-2026, its combination of heavy obfuscation, dynamic JNI trickery, and multi-layered runtime self-checks had made traditional static analysis painfully slow and error-prone. Manual reverse engineering felt like navigating a minefield blindfolded.