News

Chandigarh woman loses Rs 47 lakh in digital arrest scam  The Tribune

Rajasthan Police warns public against India Post address-update scam  thehawk.in

ED attaches Rs 43 crore-worth properties of Electrotherm in bank fraud case  The Indian Express

Rajkot doctor, 80, loses nearly Rs 60 lakh in 4-day digital arrest; bank alerts cops  India Today

In Vasant Kunj, fraudsters posing as CBI and ED held a 75-year-old on 24/7 video calls for 22 days, forced a gold mortgage, and sent a broker to sell her flat. Watch the NDTV ground report below.

US Cyber Security and Infrastructure Security Agency (CISA) has directed all federal agencies to patch a critical vulnerability in Oracle WebLogic Server. The flaw poses significant security risks and could be exploited by threat actors to compromise government systems. WebLogic Server, widely used for business applications, requires immediate patching to prevent potential attacks. The directive mandates agencies complete patching within specified timeframes as part of critical infrastructure protection measures. Organizations running WebLogic Server deployments should prioritize applying available security updates to mitigate exploitation risks. Source: SC Media.

Law enforcement agencies have successfully dismantled a widespread cyberfraud network operating across India that targeted and defrauded 196 victims. The criminal ring employed sophisticated tactics to steal money from unsuspecting individuals through various online schemes. Investigations revealed the network's organized structure and coordinated operations spanning multiple states. Authorities arrested key members involved in the fraudulent activities and recovered evidence of their operations. The case highlights the growing threat of organized cybercrime in India and the importance of coordinated law enforcement efforts. Victims lost substantial amounts through the scheme. This bust demonstrates authorities' commitment to combating digital fraud and protecting citizens from online financial crimes. Source: The Times of India.

A security breach occurred during a promotional event for the film 'Peddi' where an unauthorized person managed to bypass security measures and approach actor Janhvi Kapoor, leaving her visibly shocked. Co-star Ram Charan remained composed during the incident, earning praise for his calm demeanor. The incident highlights vulnerabilities in event security protocols and the importance of robust access control measures at public celebrity appearances. Such breaches raise concerns about personal safety at organized events and demonstrate the need for improved security procedures to prevent unauthorized access.

Kaspersky reports a concerning 20% increase in password stealer attacks targeting Indian businesses, putting corporate credentials at significant risk. These malicious tools are designed to extract login information from employees' systems, enabling unauthorized access to sensitive business accounts and data. The surge highlights growing threats to organizational cybersecurity infrastructure across India. Businesses are advised to implement robust security measures, including multi-factor authentication, regular password updates, and employee security awareness training. IT teams should monitor network activity for suspicious behavior and deploy advanced threat detection solutions. This trend underscores the importance of proactive credential protection strategies for enterprises operating in India's digital ecosystem. Source: Deccan Herald.

US cybersecurity authorities, including CISA, FBI, NSA, and other agencies, have identified malicious cyber activity targeting automatic tank gauge (ATG) systems used across energy, chemical, food, agriculture, and transportation sectors in America. These systems monitor fuel levels, temperature, and detect leaks in storage tanks. Attackers are exploiting vulnerabilities through authentication bypass, hardcoded credentials, and command execution to compromise internet-exposed ATG systems. The agencies recommend operators secure systems with strong passwords and disconnect them from the internet to minimize exposure. The attack source remains unattributed to any specific nation-state or threat group. Source: CISA.

The US Cybersecurity and Infrastructure Security Agency (CISA) has identified two vulnerabilities actively exploited by attackers: CVE-2022-0492 affecting Linux Kernel authentication and CVE-2025-48595 impacting Android Framework. These have been added to CISA's Known Exploited Vulnerabilities catalog, which tracks threats to critical infrastructure. While mandatory remediation applies to US federal agencies under Binding Operational Directive 22-01, CISA recommends all organizations prioritize patching these vulnerabilities to reduce cyberattack exposure. The catalog serves as a living resource for vulnerability management practices globally. Source: CISA.

HR technology platforms handle sensitive employee information including personal details, financial records, and identification documents. Organizations must implement robust cybersecurity measures to protect this data from unauthorized access and breaches. Key protection strategies include strong access controls, regular security audits, employee training on phishing and social engineering threats, encryption of sensitive data, and incident response plans. HR departments should ensure vendors comply with data protection standards and maintain compliance with regulations governing employee information. With increasing cyber threats targeting HR systems, companies must prioritize security infrastructure to prevent data theft and maintain employee trust. Source: SHRM.