Search the newsroom
35 results
CERT-In warns of denial-of-service risk in Cisco ASA and FTD VPN software
CERT-In's November 2 vulnerability note warns that affected Cisco firewall software may be susceptible to denial of service when secondary authentication is configured on a VPN tunnel group.
2026-11-05 · Read full reportThreat Intelligence · InternationalCERT-In warns of escalating AI-assisted attacks targeting India's financial sector
In an advisory dated November 4, CERT-In described an ongoing campaign against financial services organizations and recommended heightened monitoring and stronger API controls.
2026-11-05 · Read full reportVulnerabilities · IndiaCERT-In flags critical vulnerabilities affecting Android devices
India's CERT-In has issued a critical-severity vulnerability note covering Android versions 14, 15, 16, 16-qpr2 and 17. Users and administrators should review the relevant platform security bulletins and apply available updates.
2026-11-05 · Read full reportCyber Incidents · InternationalEU agencies coordinate response to cyber incidents affecting commercial refrigeration systems
European authorities say commercial refrigeration systems in several EU countries have been affected by cyber incidents since October 11, with another wave reported on November 1–2. Investigations remain ongoing.
2026-11-04 · Read full reportVulnerabilities · IndiaCERT-In flags critical Adobe vulnerabilities; updates available for Campaign, Connect and creative tools
CERT-In's November 3 critical advisory covers vulnerabilities in Adobe Campaign Classic, Connect, Creative Cloud Desktop and Substance 3D Painter. Adobe issued fixes on October 27 and says it was unaware of active exploitation of the issues at disclosure.
2026-11-03 · Read full reportOctober 2026 Archive · IndiaFirefox and Thunderbird security updates cover multiple critical weaknesses
CERT-In lists critical Mozilla vulnerabilities affecting Firefox, Firefox ESR and Thunderbird releases.
2026-10-30 · Read full reportOctober 2026 Archive · IndiaApache Tomcat authentication bypass and cross-user response warning
CERT-In warns of multiple Tomcat vulnerabilities affecting supported 9, 10 and 11 branches.
2026-10-29 · Read full reportOctober 2026 Archive · IndiaGoAhead embedded web server affected by TLS-related vulnerabilities
CERT-In identifies multiple vulnerabilities in GoAhead Web Server versions used by networked and embedded products.
2026-10-28 · Read full reportOctober 2026 Archive · IndiaZoom Workplace clients receive security vulnerability warning
CERT-In warns of privilege escalation and sensitive-information exposure affecting certain Zoom Workplace clients.
2026-10-28 · Read full reportPhishing · CanadaCanada warns of help-desk impersonation calls stealing cloud sign-in sessions
Canada's cyber centre reports an ongoing voice-phishing campaign against organisations, particularly legal and financial firms, using fake IT calls and lookalike sign-in pages to capture authentication sessions.
2026-10-28 · Read full reportOctober 2026 Archive · InternationalChrome October 27 stable update addresses critical FileSystem flaws
Google's October 27 release lists 52 security fixes, including critical use-after-free vulnerabilities.
2026-10-27 · Read full reportOctober 2026 Archive · Indiacurl and libcurl HTTP/2 use-after-free vulnerability reported
CERT-In reports a use-after-free issue that may affect curl/libcurl HTTP/2 upload handling.
2026-10-26 · Read full reportOctober 2026 Archive · IndiaOracle Java and GraalVM certificate validation vulnerability
CERT-In advises Oracle Java SE and GraalVM users to check affected builds and apply security updates.
2026-10-24 · Read full reportOctober 2026 Archive · IndiaISC BIND DNS servers require security review
CERT-In warns about vulnerabilities in affected ISC BIND 9 releases which could disrupt DNS services.
2026-10-23 · Read full reportCybercrime · InternationalINTERPOL reports 1,462 arrests in Africa-wide cybercrime crackdown
Operation Serengeti III coordinated action across 21 countries, with INTERPOL reporting over $105 million in recovered funds, 10,909 disrupted malicious networks and nearly 66,000 identified victims.
2026-10-22 · Read full reportCritical Vulnerabilities · InternationalEuropean cyber agencies urge urgent PHP patches for two critical server vulnerabilities
ENISA, CERT-EU, Europol and European partners warned of two PHP weaknesses, CVE-2026-109618 and CVE-2026-109619, which could enable unauthenticated remote code execution in affected environments.
2026-10-21 · Read full reportThreat Research · JapanJapan's JPCERT links AI-assisted API probing to unauthorised access investigations
Japan's JPCERT/CC analysed attack infrastructure used in incidents affecting local organisations and found evidence of AI-assisted vulnerability scanning and tests against mobile-application APIs, including services outside Japan.
2026-10-21 · Read full reportSecurity Operations · BrazilBrazilian university restricts public access to systems amid critical PHP vulnerability response
Brazil's UFCG temporarily limited internet access to systems including SEI, GLPI, Moodle and OJS while patching critical PHP vulnerabilities, illustrating the operational impact of emergency security measures.
2026-10-21 · Read full reportRansomware · InternationalUS and international agencies warn SafePay ransomware has hit hundreds of organisations
A joint CISA and FBI advisory says SafePay ransomware has affected at least 600 organisations across the Americas, Europe and Australia since August 2024. Investigators describe stolen credentials, vulnerable edge systems and attacks on backups.
2026-10-20 · Read full reportOctober 2026 Archive · IndiaSonicWall SMA 1000 appliances face multiple critical vulnerabilities
CERT-In advises administrators to patch SMA 1000 appliances after multiple high-impact flaws were disclosed.
2026-10-19 · Read full reportOctober 2026 Archive · IndiaPalo Alto Networks PAN-OS and GlobalProtect security updates urged
CERT-In listed multiple weaknesses affecting PAN-OS, Prisma Access and related Palo Alto Networks products.
2026-10-16 · Read full reportOctober 2026 Archive · InternationalChrome October 15 update addresses critical prerender flaw
Google's October 15 Chrome desktop release addressed ten security vulnerabilities.
2026-10-15 · Read full reportOctober 2026 Archive · IndiaCERT-In flags security flaws across Microsoft cloud products
CERT-In warned of critical vulnerabilities in multiple Microsoft online and cloud services.
2026-10-14 · Read full reportOctober 2026 Archive · IndiaIvanti security advisory raises concerns for Connect Secure deployments
CERT-In warns that affected Ivanti products may permit unauthorized access and command execution.
2026-10-14 · Read full reportOperational Technology · AustraliaAustralia urges businesses to secure refrigeration and other connected operational technology
Australia's ACSC warned operators of internet-connected cooling and industrial systems to reduce external exposure following reported overseas incidents, while noting it had not seen active targeting in Australia.
2026-10-14 · Read full reportOctober 2026 Archive · InternationalChrome security update fixes critical browser memory vulnerabilities
Google's October 13 desktop update included 37 security fixes, several rated critical.
2026-10-13 · Read full reportCyber Policy · SingaporeSingapore expands national cyber command centre for earlier threat detection and response
Singapore announced enhancements to its National Cybersecurity Command Centre, aiming to strengthen critical-infrastructure monitoring, malicious-domain protection, and coordinated response.
2026-10-13 · Read full reportOctober 2026 Archive · IndiaAtlassian Data Center products exposed to file access vulnerability
A critical file-access flaw affects multiple Atlassian Data Center products according to CERT-In.
2026-10-12 · Read full reportOctober 2026 Archive · IndiaMikroTik RouterOS SSH rekey-state bypass warning
CERT-In warned that vulnerable RouterOS versions could permit unauthorized pre-authentication SSH operations.
2026-10-09 · Read full reportOctober 2026 Archive · IndiaAndroid October security advisory covers framework and system issues
CERT-In identified multiple Android vulnerabilities affecting several supported OS generations.
2026-10-06 · Read full reportOctober 2026 Archive · InternationalChrome October 6 stable release includes extensive security fixes
Google announced desktop Chrome 155.0.8059.39/.40 with a large set of security corrections.
2026-10-06 · Read full reportData Security · United KingdomUK NCSC notes ASOS investigation into possible exposure of customer information
The UK National Cyber Security Centre listed an October 6 update concerning ASOS, which said it was investigating a cyber incident and possible access to some customer personal information.
2026-10-06 · Read full reportOctober 2026 Archive · IndiaCERT-In flags security weaknesses in Firefox and Thunderbird
Firefox, Firefox ESR and Thunderbird users should check for security updates following an October 5 advisory.
2026-10-05 · Read full reportOctober 2026 Archive · IndiaCERT-In warns of critical path traversal affecting Fortinet FortiMail
FortiMail email security appliances require urgent review following a critical path traversal warning.
2026-10-02 · Read full reportOctober 2026 Archive · InternationalChrome desktop security update addresses multiple vulnerabilities
October 1 Chrome desktop update addressed security weaknesses; administrators should apply the latest stable version.
2026-10-01 · Read full report