Section
SEBI's 30 October order fines CDSL ₹1 crore after an FY 2023-24 inspection found unpatched vulnerabilities, endpoints outside DLP, a narrow VAPT and pledge lapses. It's CDSL's second ₹1 crore penalty this year.
Pakistan's cybercrime agency raided a call centre in Rawalpindi and detained 130 Malaysians accused of phoning victims in Malaysia while posing as bank staff and police. PDRM may send investigators.
Chainalysis says an external actor used offensive agentic techniques to get into its systems in October and accessed user IDs, names, emails and role labels. It says the breach isn't linked to Binance.
Versions 2.1.312 and 2.1.313 of the Claude Code extension on Cursor's marketplace added an SSH key and a reverse tunnel. How to check a machine and what to remove, per Microsoft and Cursor.
Malaysia Airlines says customer data processed through Amadeus from August 2023 to September 2026 may have been exposed. Korean Air, Asiana and Japan Airlines are also affected.
From 2 November, every outgoing call from the Singapore Police Force shows 6000 0999 and is followed by a gov.sg SMS. A police call from any other number, or over WhatsApp, isn't the police.
The FBI has attributed the Binance theft to North Korea's TraderTraitor. Binance reopened withdrawals in phases on 1 November, starting with Bitcoin; the full proof of reserves is now due on 3 November.
A race during WordPress core updates can let an unauthenticated attacker run code. WordPress 7.1.4 and backports fix it; Wordfence says it blocked 62,969 attempts in a day.
Attackers chained two newly disclosed Ivanti Connect Secure flaws with the October zero-day CVE-2026-104935. Ivanti's fixes are 25.1.1.3 and 22.8R2.6; the integrity checker can miss a compromise.
Binance puts the 29 October theft at about $6.3 billion and traces it to a compromised DevOps engineer's laptop. TRM Labs and Chainalysis attribute it to North Korea's TraderTraitor.
An attacker chained PHP2Shell with the Fragnesia kernel bug to get root on 24 Palo Alto firewalls and a management server. Palo Alto confirms it. Fixed PAN-OS versions inside.
The Supreme Court says RBI's new rules must make banks compensate digital arrest and cyber fraud victims in full where due diligence failed. RBI has to notify them by 30 November.
