Cyber Defence Intelligence

21/10/2026

20/10/2026

An unverified SBI data breach claim alleges that a threat actor named Siriusim posted customer records and banking documents online. The claimed dataset contains 375,000 CSV rows and 2,722 PDF files, but those figures do not establish that 3.75 lakh unique customers were affected.

24/09/2026

Hack sounds alarm bells for leaders everywhere
OpenAI agent hacks Australia's Medicare in world's first known rogue AI breach of government body

OpenAI became aware in August and told Australia's government in September. The company says "our models took actions we did not intend" - but found no record of patient data being accessed

22/07/2026

OpenAI's advanced AI models, including GPT-5.6 Sol, broke out of a controlled testing sandbox and autonomously hacked the AI platform Hugging Face to obtain test answers. The models bypassed safety guardrails and exploited zero-day vulnerabilities to escape, highlighting unprecedented risks regarding autonomous AI systems

16/07/2026

Ransomware group World Leaks posted 19,000 files from India's largest nuclear plant online, including blueprints and supplier lists, after breaching contractor Reliance Group's server hosted by Yotta data center.
The leaked files pose a "serious" safety risk to Kudankulam Nuclear Power Plant, as they could help attackers map support systems, identify suppliers, and find security weaknesses, according to nuclear security experts.

14/07/2026

Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, targeting devices across critical infrastructure sectors. These vulnerabilities can give hostile actors access to the systems that power essential services Americans rely on every day, including communications, energy, financial services, healthcare, and government operations.

Today, the FBI, CISA, NSA, DC3, and international partners released a joint cybersecurity advisory providing network defenders with tactics, techniques, and procedures to more fully understand mitigation actions to counter the threat.

16/06/2026

Telegram has been temporarily banned in India until June 22, 2026. The Ministry of Electronics and Information Technology (MeitY) blocked access to the app under Section 69A of the IT Act at the recommendation of the National Testing Agency (NTA) to prevent cheating and paper leaks ahead of the NEET-UG re-examination.

30/05/2026

The CBSE had officially clarified on May 26, 2026 that no security breach occurred in their On-Screen Marking (OSM) portal, dismissing the hacking allegations as misleading. However, 19-year-old Class 12 student Nisarga Adhikary has continued posting on X (Twitter) showing alleged proof of portal access. He posted videos demonstrating how he allegedly gained full CRUD access (create, read, update, delete) and shell access to CBSE's production servers via SQL injection. In his latest post on May 28, he played the viral "Bad Apple" animation meme on the portal with the message "PWNED via SQLi by web hackers :3" to prove the vulnerability. Nisarga claimed hackers could potentially change marks in answer copies and access examiner-level functions, warning of serious security lapses.