Cyber Security

India's Department of Telecommunications announced that its Financial Fraud Risk Indicator framework prevented over ₹5,000 crore in cyber fraud losses in 15 months. By stopping suspicious transactions at source, the telecom-banking intelligence system protected lakhs of citizens from digital fraud.

Media and technology provider Thomson Reuters has disclosed a cybersecurity breach on its C-Track case management platform, potentially exposing sensitive personal data and court records across at least 12 US states, the US Virgin Islands, and Ontario, Canada.

Google has issued an urgent security update for its Chrome browser to fix a high-severity zero-day vulnerability in its V8 JavaScript engine that is currently being exploited by cybercriminals. The patch addresses a critical flaw that allows remote attackers to execute malicious code on target devices.

Artificial intelligence leader OpenAI has launched a $1 billion initiative titled 'Daybreak for Frontline Defenders' to provide AI-powered cybersecurity tools, training, and technical support to under-resourced public operators. The program prioritizes critical infrastructure defenders, including water utilities, power grids, local governments, and community banks.

UK airport operator Manchester Airports Group suffered a massive cyber attack that exposed personal records of nearly 8.7 million passengers. Cyber extortionists began leaking the stolen data online after the company refused to pay a ransom fee.

Cybersecurity firm Palo Alto Networks disclosed a breach investigation showing how a threat actor used autonomous AI agents to execute a complex network intrusion in less than 10 hours. The AI-driven attack compressed weeks of traditional penetration testing into automated execution loops.

SonicWall has issued an emergency alert after discovering active zero-day attacks exploiting two critical vulnerabilities in its Secure Mobile Access 1000 series VPN appliances. Cybersecurity experts urge enterprise administrators to apply available hotfixes immediately to prevent unauthenticated remote code execution.

The US Department of Justice and FBI have seized key internet domains used by Chinese state-sponsored group QTFY to target sensitive U.S. infrastructure and government agencies. The operation rendered two major cyber-espionage platforms, QScan and QTRouter, completely inoperable.

Cybersecurity vendor SonicWall has issued urgent security updates after confirming that threat actors are actively exploiting two zero-day vulnerabilities in its enterprise Secure Mobile Access 1000 series VPN appliances.

Cybersecurity monitoring groups have warned that nearly 22,000 Microsoft Exchange servers exposed to the internet remain unpatched against a high-severity authentication bypass vulnerability. Authorities report that exploit code is active online, enabling unauthorized actors to hijack corporate mailboxes and access sensitive communications.

Security researchers and threat monitoring agencies have raised urgent alarms after attackers began actively exploiting chained vulnerabilities in PaperCut print management software. Cybersecurity authorities, including CISA, have added the flaws to their known exploited vulnerability lists, urging organizations to apply emergency patches immediately.

Security monitors have discovered that nearly 22,000 Microsoft Exchange servers worldwide remain unpatched against a high-severity authentication bypass vulnerability. The flaw allows unauthorized remote attackers to hijack enterprise mailboxes, read sensitive communications, and exfiltrate attachments.

US federal agencies have issued a joint warning regarding escalating AI-powered cyber threats targeting critical infrastructure, including recent breaches of water facilities involving Siemens programmable logic controllers, with suspected links to state-sponsored actors like Iran. These advanced attacks leverage artificial intelligence to lower the barrier for exploitation, posing significant risks to operational safety and public services.

Artificial intelligence is rapidly transforming offensive cyber operations against India, making attacks more automated, scalable, and autonomous. India has been ranked among the most cyber-attacked nations globally, facing sophisticated AI-powered threats across critical infrastructure and government systems.

Global cybersecurity leader Proofpoint has expanded its operations in India, inaugurating a new AI Security Centre in Hyderabad and an additional office in New Delhi. This strategic move aims to address the escalating AI-driven cyber risks, data privacy concerns, and data sovereignty requirements within the Indian market.

SEBI Chairman Tuhin Kanta Pandey has urged India's financial sector to prioritize continuous, risk-driven cyber resilience, moving beyond periodic compliance to counter increasingly sophisticated threats. His remarks came during SEBI's Symposium on Cyber Defence held in Mumbai.

Healthcare technology provider CareCloud has confirmed a data breach impacting over 3.7 million individuals, revealing sensitive personal and health information. The breach, initially detected in March 2026, involved unauthorized access to an AWS environment.

The Indian government has ordered Google to remove hundreds of accounts on its Firebase platform after discovering cybercriminals were actively misusing the service to impersonate banks, distribute malware, and steal financial information from citizens. This crackdown by the Indian Cyber Crime Coordination Centre (I4C) highlights growing concerns over online fraud in the nation's rapidly expanding digital payments ecosystem.