---
title: "Cyber Security News India and CERT-In Advisories | bharat.digital"
description: "Cyber security news from India first: data breaches, hacks and cyber fraud at Indian companies, then the latest CERT-In advisories, each linked to its source."
url: "https://bharat.digital/security/index.md"
canonical: "https://bharat.digital/security/"
published: "2026-11-02T00:12:33+05:30"
updated: "2026-11-02T08:30:01+05:30"
section: "Security"
date: "2026-11-02"
language: "en-IN"
site: "bharat.digital"
---

# Security desk: Monday 2 November 2026

1 stories. Cite the publisher using original_url.

## From the desk

- [Capillary's 3 million euro loss came down to a lookalike domain and WhatsApp, KPMG finds. The deepfake question stays open](https://bharat.digital/originals/capillary-kpmg-forensic-audit-payment-diversion-fraud/index.md) (Analysis, 2026-10-31, 4 min read): The forensic report on the Czech subsidiary fraud found impersonation and a fake confidential deal, not a hack. It could neither confirm nor rule out the voice cloning the company first described.
- [QNu Labs and the business of getting India ready for quantum-safe encryption](https://bharat.digital/originals/qnu-labs-quantum-safe-security/index.md) (Feature, 2026-10-29, 3 min read): The Bengaluru startup raised Rs 200 Cr with the National Quantum Mission as a co-lead. What it sells, why the timing matters, and what the round is meant to pay for.

## Security desk

### CERT-In advisories (latest)

- CIAD-2026-0057 (2026-10-28): Multiple vulnerabilities in GoAhead Web Server. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0057
- CIAD-2026-0056 (2026-10-27): Multiple Vulnerabilities in Apple Products. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0056
- CIAD-2026-0055 (2026-10-27): Out-of-Bounds Write Vulnerability in Google Brotli Decoder. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0055
- CIAD-2026-0054 (2026-10-24): Multiple vulnerabilities in Fortinet Products. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0054
- CIAD-2026-0053 (2026-10-23): Compromise of LiteLLM PyPI Package and Docker Images. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0053
- CIAD-2026-0052 (2026-10-22): Advisory to MSME - Remote code execution vulnerabilities in PHP (PHP2Shell). original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0052
- CIAD-2026-0051 (2026-10-22): Multiple Vulnerabilities in Oracle Products. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0051
- CIAD-2026-0050 (2026-10-21): Compromise of eMudhra Intermediate CA Certificates. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0050
- CIAD-2026-0049 (2026-10-15): AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0049
- CIAD-2026-0048 (2026-10-14): Multiple Vulnerabilities in SAP Products. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0048
- CIAD-2026-0047 (2026-10-14): Multiple Vulnerabilities in Microsoft Products. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0047
- CIAD-2026-0046 (2026-10-09): Threat Actors Exploiting Payment and Disbursement APIs for Unauthorized Fund Transfers in BFSI Entities. original_url: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0046

### CISA Known Exploited Vulnerabilities, latest additions (catalog 2026.10.30)

- CVE-2026-118527 added 2026-10-30: Ivanti Connect Secure, Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-118527
- CVE-2026-111357 added 2026-10-30: Ivanti Connect Secure, Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-111357
- CVE-2026-97229 added 2026-10-29: GitLab Community Edition and Enterprise Edition, GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-97229
- CVE-2026-76418 added 2026-10-29: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software, Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-76418
- CVE-2026-46300 added 2026-10-28: Linux Kernel, Linux Kernel Missing Initialization of a Variable Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-46300
- CVE-2026-41709 added 2026-10-28: Broadcom VMware ESX, Broadcom VMWare ESX Insufficient Logging Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-41709
- CVE-2026-48356 added 2026-10-27: Adobe Commerce and Magento, Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-48356
- CVE-2026-111497 added 2026-10-27: Google Brotli, Google Brotli Unchecked Return Value Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-111497
- CVE-2026-109619 added 2026-10-26: PHP Group PHP, PHP Stale Internal Request-State Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-109619
- CVE-2026-109618 added 2026-10-26: PHP Group PHP, PHP Memory Corruption Vulnerability. original_url: https://nvd.nist.gov/vuln/detail/CVE-2026-109618

### Cyberattacks on banks, including AU Small Finance Bank, worry insurers as claim risks rise

- Source: The Economic Times
- Published: 1 November 2026, 23:29 IST (2026-11-01T23:29+05:30)
- Section: Security
- Link: https://bharat.digital/s/661eb8ec1971
- original_url: https://economictimes.indiatimes.com/industry/banking/finance/insure/cyberattacks-on-banks-including-au-small-finance-bank-worry-insurers-as-claim-risks-rise/articleshow/135434670.cms
- Image: https://bharat.digital/img/661eb8ec1971-l.webp

Cyberattacks targeting financial institutions have raised concerns about security vulnerabilities and potential losses. AU Small Finance Bank is investigating a possible data breach involving customer information stored on Salesforce.

## Earlier: Sunday 1 November 2026

#### ED Arrests Armstrong Exchange Founder Over Alleged Online Betting Scam

- Source: Inc42
- Published: 1 November 2026, 01:52 IST (2026-11-01T01:52+05:30)
- Section: Security
- Link: https://bharat.digital/s/f9207e269c5a
- original_url: https://inc42.com/buzz/ed-arrests-armstrong-exchange-founder-over-alleged-online-betting-scam/
- Image: https://bharat.digital/img/f9207e269c5a-l.webp

The Enforcement Directorate (ED) has arrested Armstrong Exchange founder Sagar Dash in connection with an alleged online gaming and betting…

## Earlier: Saturday 31 October 2026

#### \[Update\] Forensic Audit Finds External Breach Behind €3 Mn Capillary Fraud

- Source: Inc42
- Published: 31 October 2026, 19:33 IST (2026-10-31T19:33+05:30)
- Section: Security
- Link: https://bharat.digital/s/dbe6afc5eff3
- original_url: https://inc42.com/buzz/capillary-technologies-subsidiary-hit-by-e3-mn-cyber-fraud/
- Image: https://bharat.digital/img/dbe6afc5eff3-l.webp

Update | October 31, 19:33 IST A forensic audit by KPMG has found that the €3.04 Mn banking fraud at…

#### FATF steps up global crackdown on virtual asset crimes, fraud and scam compounds

- Source: BusinessLine
- Published: 31 October 2026, 16:17 IST (2026-10-31T16:17+05:30)
- Section: Security
- Link: https://bharat.digital/s/ebb5cf3c47d0
- original_url: https://www.thehindubusinessline.com/money-and-banking/fatf-steps-up-global-crackdown-on-virtual-asset-crimes-fraud-and-scam-compounds/article71649061.ece
- Image: https://bharat.digital/img/ebb5cf3c47d0-l.webp

The global watchdog has announced fresh measures to address emerging financial crime risks and strengthen implementation of international standards across jurisdictions

#### AU Small Finance Bank data leak: Salesforce says no vulnerability at its end

- Source: The Economic Times
- Published: 31 October 2026, 14:17 IST (2026-10-31T14:17+05:30)
- Section: Security
- Link: https://bharat.digital/s/97a24d4041d2
- original_url: https://economictimes.indiatimes.com/industry/banking/finance/banking/au-small-finance-bank-data-leak-salesforce-says-no-vulnerability-at-its-end/articleshow/135395127.cms
- Image: https://bharat.digital/img/97a24d4041d2-l.webp

Salesforce has stated no vulnerabilities were found concerning a suspected data leak at AU Small Finance Bank. The bank is investigating claims of a breach by hackers, affecting sensitive customer data.

#### Special newsletter: Unanswered questions, October edition

- Source: Medianama
- Published: 31 October 2026, 12:04 IST (2026-10-31T12:04+05:30)
- Section: Security
- Link: https://bharat.digital/s/b8e2b8eac7af
- original_url: https://www.medianama.com/2026/10/223-special-newsletter-unanswered-questions-october-edition/
- Image: https://bharat.digital/img/b8e2b8eac7af-l.webp

From Meta's handling of child abuse ads and content blocking to AI-powered cyberattacks and user privacy, MediaNama shares five sets of questions that authorities and tech companies left unanswered.

#### Fake Video Falsely Shows India's Defence Minister Criticizing Army

- Source: X News (AI summary of posts on X)
- Published: 31 October 2026, 09:30 IST (2026-10-31T09:30+05:30)
- Section: Security
- Link: https://bharat.digital/s/0bc9a38f9e97
- original_url: https://x.com/i/trending/2116378576253518043

Fact-checkers from the Press Information Bureau quickly exposed the AI-manipulated video, confirming Singh never made those remarks and sharing the original footage where he praised the army's role in defending the nation.

#### AU SFB Probes Potential Data Leak, Vijay Sales’ Admin Access Allegedly Listed For $25K

- Source: Inc42
- Published: 31 October 2026, 11:35 IST (2026-10-31T11:35+05:30)
- Section: Security
- Link: https://bharat.digital/s/f07b875a25d0
- original_url: https://inc42.com/buzz/au-sfb-probes-potential-data-leak-vijay-sales-admin-access-allegedly-listed-for-25k/
- Image: https://bharat.digital/img/f07b875a25d0-l.webp

AU Small Finance Bank (AU SFB) is investigating a potential data leak involving a Salesforce-hosted software platform holding limited information…

## Earlier: Friday 30 October 2026

#### AU SFB probes potential vehicle loan data leak; says core systems unaffected

- Source: BusinessLine
- Published: 30 October 2026, 18:11 IST (2026-10-30T18:11+05:30)
- Section: Security
- Link: https://bharat.digital/s/d37cad5fa10e
- original_url: https://www.thehindubusinessline.com/money-and-banking/au-sfb-probes-potential-vehicle-loan-data-leak-says-core-systems-unaffected/article71644904.ece
- Image: https://bharat.digital/img/d37cad5fa10e-l.webp

A cyber threat intelligence platform has reported breach claims, but the bank says allegations of KYC data exposure remain unverified

#### Event Announcement: Technical Issues with SIM Binding, Online, November 13, 2026 #NAMA

- Source: Medianama
- Published: 30 October 2026, 14:39 IST (2026-10-30T14:39+05:30)
- Section: Security
- Link: https://bharat.digital/s/de7dc178c180
- original_url: https://www.medianama.com/2026/10/223-event-announcement-technical-issues-with-sim-binding-online-november-13-2026-nama/
- Image: https://bharat.digital/img/de7dc178c180-l.webp

As India's SIM binding deadline approaches, MediaNama hosts a discussion on its technical feasibility, impact on messaging apps and users, and effectiveness in preventing cybercrime and fraud.

#### AU Small Finance Bank data breach: Hackers threaten to leak Aadhaar, PAN and customer records

- Source: Mint
- Published: 30 October 2026, 14:30 IST (2026-10-30T14:30+05:30)
- Section: Security
- Link: https://bharat.digital/s/90db8456d567
- original_url: https://www.livemint.com/technology/tech-news/au-small-finance-bank-data-breach-hackers-threaten-to-leak-aadhaar-pan-and-customer-records-11793350577104.html
- Image: https://bharat.digital/img/90db8456d567-l.webp

#### Binance $6.3 billion crypto hack: What happened, who is behind it and where is the money?

- Source: BusinessLine
- Published: 30 October 2026, 15:58 IST (2026-10-30T15:58+05:30)
- Section: Security
- Link: https://bharat.digital/s/2203daab1797
- original_url: https://www.thehindubusinessline.com/money-and-banking/cryptocurrency/binance-63-billion-crypto-hack-what-happened-who-is-behind-it-and-where-is-the-money/article71644609.ece
- Image: https://bharat.digital/img/2203daab1797-l.webp

The breach has triggered an investigation into Binance’s transaction security, while blockchain analysts track the movement of stolen digital assets.

#### Binance Hit By Record $6.3 Bn Crypto Breach, Suspends Withdrawals

- Source: Inc42
- Published: 30 October 2026, 11:48 IST (2026-10-30T11:48+05:30)
- Section: Security
- Link: https://bharat.digital/s/780e6ceb5b1e
- original_url: https://inc42.com/buzz/binance-hit-by-record-6-3-bn-crypto-breach-suspends-withdrawals/
- Image: https://bharat.digital/img/780e6ceb5b1e-l.webp

Cryptocurrency exchange Binance has reported a security breach affecting an estimated $6.3 Bn in assets, in what appears to be…

#### Binance estimates $6.3B impact from security breach, freezes $3B in crypto assets

- Source: YourStory
- Published: 30 October 2026, 10:29 IST (2026-10-30T10:29+05:30)
- Section: Security
- Link: https://bharat.digital/s/670cb3f66df1
- original_url: https://yourstory.com/2026/10/binance-63-billion-impact-security-breach-freezes-3-billion-crypto-assets
- Image: https://bharat.digital/img/670cb3f66df1-l.webp

Binance said a preliminary investigation pointed to a compromised DevOps engineer's laptop as the possible entry point for the breach. The exchange has suspended deposits and withdrawals and pledged to cover customer losses.

## Earlier: Thursday 29 October 2026

#### Rs 35 Crore Vanishes from Greater Noida Bank Accounts Without Alerts

- Source: X News (AI summary of posts on X)
- Published: 29 October 2026, 21:21 IST (2026-10-29T21:21+05:30)
- Section: Security
- Link: https://bharat.digital/s/f4c2018230f3
- original_url: https://x.com/i/trending/2115706500761198778

Dozens of customers at Punjab National Bank's Aichhar village branch in Sector Pi-1 allege nearly Rs 35 crore disappeared from savings accounts and fixed deposits without authorization. Many farmers lost land compensation funds.

#### ‘In fake world, people are losing tonnes of money’: SEBI chief Tuhin Kanta Pandey on WhatsApp, Telegram investment scams

- Source: Mint
- Published: 29 October 2026, 16:21 IST (2026-10-29T16:21+05:30)
- Section: Security
- Link: https://bharat.digital/s/7ce4e974d222
- original_url: https://www.livemint.com/money/in-fake-world-people-are-losing-tonnes-of-money-sebi-chief-tuhin-kanta-pandey-on-whatsapp-telegram-investment-scams-11793270000182.html
- Image: https://bharat.digital/img/7ce4e974d222-l.webp

#### CloudSEK launches incubation programme for cybersecurity startups

- Source: YourStory
- Published: 29 October 2026, 15:45 IST (2026-10-29T15:45+05:30)
- Section: Security
- Link: https://bharat.digital/s/14d0e9db0891
- original_url: https://yourstory.com/2026/10/cloudsek-launches-incubation-programme-for-cybersecurity-startups
- Image: https://bharat.digital/img/14d0e9db0891-l.webp

Launchpad is a 12-week programme offering mentorship, investor connections, threat intelligence resources, and access to potential customers and channel partners.

#### Supreme Court Slams Digital Arrest Scams and Bank Lapses

- Source: X News (AI summary of posts on X)
- Published: 29 October 2026, 17:50 IST (2026-10-29T17:50+05:30)
- Section: Security
- Link: https://bharat.digital/s/4c9b203f51c6
- original_url: https://x.com/i/trending/2115779495546228947

India's Supreme Court, led by CJI Surya Kant, expressed outrage over 'digital arrest' scams where fraudsters pose as officials to extract money, with a recent case seeing a woman lose Rs 2.5 crore.

#### AI-powered cyberattacks siphon ₹300 crore from small NBFCs in two months

- Source: The Economic Times
- Published: 29 October 2026, 05:30 IST (2026-10-29T05:30+05:30)
- Section: Security
- Link: https://bharat.digital/s/35e2668711a3
- original_url: https://economictimes.indiatimes.com/industry/banking/finance/ai-powered-cyberattacks-siphon-300-crore-from-small-nbfcs-in-two-months/articleshow/135278215.cms
- Image: https://bharat.digital/img/35e2668711a3-l.webp

Recent cyberattacks have inflicted an estimated loss of ₹300 crore on Indian NBFC, with around 150 fraud cases reported. Focus has shifted towards identifying Chinese hacking platforms and AI toolkit involvement in these incidents.

#### CERT-In flags high-risk vulnerabilities in Apple products, warns of security threats

- Source: BusinessLine
- Published: 28 October 2026, 21:47 IST (2026-10-28T21:47+05:30)
- Section: Security
- Link: https://bharat.digital/s/669ddcc12dd5
- original_url: https://www.thehindubusinessline.com/info-tech/cert-in-flags-high-risk-vulnerabilities-in-apple-products-warns-of-security-threats/article71637021.ece
- Image: https://bharat.digital/img/669ddcc12dd5-l.webp

The national cyber security agency has identified flaws across Apple software components, including WebKit, Kernel and media-processing frameworks, posing multiple security risks.