#Cybersecurity

AI-discovered bugs may soon trigger fresh disruptions, cyber experts say

AI tools are driving a year-on-year doubling of discovered digital vulnerabilities, according to upcoming VulnCheck research.

HPE patches eight max severity RCE and auth bypass AOS flaws

Capcom data breach confirmed — around 11.7 million accounts thought to have been affected

Gaming company Capcom has confirmed a data breach affecting approximately 11.7 million user accounts.

Authentication does not equal authorization: Are we asking passkeys to prove too much?

<UNKNOWN>

Split Tunneling Is Your VPN’s Best Feature. Here’s How to Make the Most of It

A guide explaining split tunneling, a VPN feature that provides selective privacy and protection by routing only specific traffic through the VPN.

Why eMudhra’s exit from the website certification business is not enough

eMudhra, a licensed Indian certificate authority, withdrew from the global SSL/TLS certificate business after researchers discovered weak private keys in eight intermediate certificates that could be exploited.

China-aligned hackers deploy AI agents in massive ConnectWise supply chain attack

China-aligned hackers deployed AI agents in a major supply chain attack targeting ConnectWise, a widely-used IT management platform.

eMudhra quits global TLS certificate market after compromise of CA signing keys

Indian digital trust company eMudhra is exiting the global SSL/TLS certificate business after the compromise of private keys at eight of its certificate authorities, offering customers free replacement certificates from Sectigo.

AI is turning vulnerabilities into attack paths and enterprises must change how they defend

AI is enabling attackers to combine vulnerabilities and compromised identities into coordinated attack paths, forcing enterprises to rethink their defense strategies.

UK threatens subsea cable saboteurs with 14 years behind bars

The UK government plans to modernize 140-year-old legislation and impose up to 14 years imprisonment for sabotaging subsea cables critical to internet and energy infrastructure.

Japan to set up AI hacker team as PHP flaws knock services offline

Japan plans to establish an AI-powered ethical hacker team to test national systems for vulnerabilities, following critical PHP flaws that forced banks and government agencies offline.

AI agents are coming for your bank’s easy money

An opinion piece warns that autonomous AI agents pose emerging financial risks to banks through real-time autonomous decision-making during transactions.

Berlin’s Cygrid exits stealth with €2.66 million to stop AI agents from accessing confidential company data

Berlin-based cybersecurity startup Cygrid raised €2.66 million in pre-Seed funding to protect enterprises from unauthorized AI agent access to confidential data.

Railway urges users to revoke API keys after cyberattack exposes customer secrets

Cloud platform Railway disclosed a cyberattack that exposed encrypted customer data including API keys and credentials, urging all users to revoke and replace their stored secrets.

SonicWall opens new Pune office, strengthening India’s role in global cybersecurity innovation

SonicWall has opened a new office in Pune, India to expand its engineering and development operations as part of its long-term investment strategy in the country.

DoT’s SIM Binding Rules Set to Take Effect Beginning January 1 to Curb Cyber Fraud: Here’s What Changes

India's Department of Telecommunications mandates SIM-binding rules for messaging and communication apps starting January 1, 2027, requiring apps like WhatsApp and Telegram to implement SIM-based login verification.

PHP security flaw: India activates emergency response; takes apps offline amid a global alert

India activated emergency cybersecurity measures after critical PHP flaws affecting 70% of internet applications were discovered, prompting banks to audit systems and patch government websites.

Rush is on to patch a software vulnerability that could impact 70% of websites worldwide

A critical software vulnerability affecting approximately 70% of websites worldwide is being patched, with some government sites experiencing outages during remediation efforts.