General High 5 May

Microsoft Edge Stores Passwords in Cleartext Memory at Launch

A security researcher has uncovered a critical vulnerability in Microsoft Edge, revealing that the browser decrypts and stores all saved passwords in cleartext process memory upon launch. This exposure occurs regardless of user activity, making credentials susceptible to memory scraping attacks. The flaw, disclosed by PaloAltoNtwks Norway, highlights a significant risk to user data. Source: […]

Why it matters: Indian organizations using Microsoft Edge should be aware of this vulnerability and consider advising users on alternative password management or browser usage until a patch is released.
General High 5 May

Amazon SES Abuse for Phishing Bypasses Security Filters

Amazon's Simple Email Service (SES) is being exploited by threat actors to launch sophisticated phishing campaigns. These malicious emails are designed to bypass standard security filters and render traditional reputation-based blocking mechanisms ineffective. The technique allows attackers to deliver highly convincing phishing messages directly to inboxes, increasing the risk of compromise. Source: BleepingComputer

Why it matters: Indian organizations must enhance their email security defenses and user awareness training to counter phishing attacks leveraging Amazon SES, as these can bypass common security measures.
General High 5 May

CERT-In warns of rising AI-driven cyber threats, ‘Mythos’ concerns

India's CERT-In has issued a warning regarding the increasing prevalence of AI-driven cyber threats. The advisory specifically highlights concerns related to a potential threat named 'Mythos'. This alert underscores the evolving landscape of cyber risks powered by artificial intelligence. Source: Cityairnews

Why it matters: Indian organizations must enhance their cybersecurity defenses and threat intelligence capabilities to counter sophisticated AI-driven attacks warned by CERT-In.
General Low 5 May

IES Briefing: Trellix Discloses Data Breach After Source Code Repository Hack

Your browser does not support audio playback. About this briefing: AI-generated from the original story. Voices: Neerja & Prabhat. ▶ Read transcript Neerja: Cybersecurity firm Trellix has announced a data breach. Attackers gained unauthorized access to a part of its source code repository. This incident involved their internal development environment. Prabhat: This breach highlights significant […]

Telecom High 5 May

New MicroStealer Malware Targets Telecom, Education Sectors Globally

A new infostealer malware, MicroStealer, has emerged and is rapidly spreading across the threat landscape. First detected in December 2025, this malware quickly gained traction in sandbox environments. It is actively targeting organizations in the telecom and education sectors. Source: Cybersecurity News

Why it matters: Indian critical infrastructure operators, especially in the telecom sector, must update their threat intelligence and enhance detection mechanisms against this new infostealer.
General High 5 May

Trellix Discloses Data Breach After Source Code Repository Hack

Cybersecurity firm Trellix has disclosed a data breach after attackers gained access to a portion of its source code repository. This incident involves unauthorized access to the company's internal development environment. The breach underscores the critical need for robust supply chain security and continuous monitoring of vendor risks. Source: BleepingComputer

Why it matters: Indian critical infrastructure organizations using Trellix products should monitor for further advisories and evaluate potential supply chain risks stemming from this incident.
Government High 4 May

Silver Fox Deploys ABCDoor Malware via Tax Phishing in India

China's Silver Fox cybercrime group is deploying ABCDoor malware against Indian organizations. The campaign uses tax-themed phishing emails impersonating the Income Tax Department of India. A similar operation also targeted Russian entities. Source: The Hacker News

Why it matters: Indian organizations, particularly government and financial entities, must enhance phishing detection and user awareness against tax-themed attacks.
Banking High 4 May

Indian Banks, CERT-In Address Anthropic Mythos AI Risk to Financial Systems

The article addresses the potential risks of Anthropic Mythos AI to India's banking and financial systems. It emphasizes the necessity for financial institutions to report suspicious activities to CERT-In. Coordinated response mechanisms are being developed through the Indian Banks Association to manage these emerging AI threats. Source: Currentaffairs Adda247

Why it matters: Indian financial organizations must prioritize understanding and mitigating AI-driven risks, actively engaging with CERT-In and industry associations for robust collective defense.
General High 4 May

CERT-In Issues High-Severity Advisory on ‘Mythos’ Threat

India's CERT-In has issued a high-severity advisory concerning the 'Mythos' threat, which officials deem unprecedented. The directive urges all organizations to treat this threat with extreme caution and implement robust security measures. This development occurs as Anthropic introduces its Claude Security offering, highlighting growing concerns around advanced threats. Source: MediaNama

Why it matters: Indian organizations must heed CERT-In's high-severity advisory on the unprecedented Mythos threat and implement necessary security measures promptly to protect critical infrastructure.
General High 4 May

India Warns: AI Accelerates Software Flaw Exploitation

India's cybersecurity agency has issued a warning about emerging AI capabilities. Anthropic's Mythos AI is reportedly compressing the timeline between identifying software flaws and developing functional exploits. This acceleration poses a significant new challenge for cybersecurity defenses, potentially increasing the speed and impact of cyber attacks. Source: Techinasia

Why it matters: Indian organizations must prioritize rapid vulnerability patching and robust threat intelligence to mitigate risks from AI-accelerated exploit development.
General Critical 4 May

Indian IT Firms See Critical Surge in Credential Theft Detections

A recent report indicates a significant surge in credential theft attempts targeting Indian IT firms. Over 265 million detections of credential theft were recorded, highlighting a widespread and persistent threat landscape. This increase emphasizes the urgent need for enhanced cybersecurity measures, particularly around remote access and identity management. Source: Thehawk

Why it matters: Indian organizations, especially those in the IT sector or relying on IT service providers, must prioritize robust identity and access management to counter this escalating threat.
General High 4 May

ESET Establishes Dedicated India Entity Amidst Rising Cyber Threats

ESET has announced the establishment of a dedicated entity in India, aiming to bolster its long-term growth strategy across the APAC region. This move comes as India's cybersecurity landscape experiences a significant increase in complexity and threats, including ransomware. The new entity will enable ESET to better serve the growing demand for robust cybersecurity solutions […]

Why it matters: Indian organisations can expect enhanced local support and access to ESET's cybersecurity solutions as the company deepens its commitment to the region.
General Critical 4 May

Critical MOVEit Flaws Allow Authentication Bypass, Full System Control

Progress Software has issued a critical security bulletin for its MOVEit Automation platform, detailing two highly severe vulnerabilities. These flaws could enable attackers to bypass security checkpoints and gain full system control over affected systems. The vulnerabilities pose a significant risk given MOVEit Automation's widespread use for secure enterprise file transfers. Source: Cybersecurity News

Why it matters: Indian critical infrastructure organizations utilizing MOVEit Automation must promptly review this alert and apply all necessary patches to mitigate the risk of authentication bypass and system compromise.
General High 4 May

CISA Warns: Critical cPanel & WHM Vulnerability Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw in cPanel & WHM web hosting platforms. This vulnerability, tracked as CVE-2026-41940, has been added to CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation by threat actors. The flaw affects WebPros products and poses a significant […]

Why it matters: Indian organizations utilizing cPanel & WHM for their web hosting or relying on service providers using these platforms must prioritize immediate patching or mitigation to prevent active exploitation.
General Critical 4 May

Apache MINA Critical Vulnerabilities Allow Remote Code Execution, Urgent Updates Issued

The Apache MINA project has released urgent security updates to address two critical vulnerabilities. These flaws could enable attackers to execute arbitrary code on affected systems. Developers are strongly advised to update their software immediately to prevent potential exploitation. Source: Cybersecurity News

Why it matters: Indian organizations utilizing Apache MINA in their network applications must apply these critical updates to mitigate severe remote code execution risks.
General Critical 4 May

40,000 Servers Compromised via cPanel Zero-Day Exploitation

Over 40,000 servers have been compromised due to ongoing exploitation of a cPanel vulnerability. The attacks are targeting CVE-2026-41940, a recently patched zero-day flaw. This vulnerability grants administrative access to affected systems, posing a significant risk. Source: Security Week

Why it matters: Indian organizations utilizing cPanel must immediately verify patch status for CVE-2026-41940 to prevent administrative compromise of their servers.
General High 4 May

Microsoft April Windows Updates Cause Third-Party Backup Failures

Microsoft has confirmed that its April 2026 security updates are causing significant failures in third-party backup applications. The issue specifically affects software utilizing the psmounterex.sys driver, leading to operational disruptions. Organizations relying on these backup solutions should be aware of the problem and monitor for official resolutions from Microsoft. Source: BleepingComputer

Why it matters: Indian critical infrastructure operators must assess their backup systems for compatibility with recent Windows updates and prepare for potential recovery challenges.
General Critical 4 May

CISA Warns of Active Exploitation of ‘Copy Fail’ Linux Root Vulnerability

CISA has issued a warning regarding the active exploitation of the 'Copy Fail' Linux security vulnerability. Threat actors are leveraging a recently disclosed proof-of-concept exploit to gain root access to affected systems. This critical flaw allows attackers to take full control of vulnerable Linux machines. Source: BleepingComputer

Why it matters: Indian organizations using Linux systems must immediately identify and patch vulnerable machines to prevent root compromise and potential data breaches.
Transport High 4 May

FBI Alerts Logistics Firms to Surge in Cyber-Enabled Cargo Theft

The FBI has issued a warning regarding a significant increase in cyber-enabled cargo theft. Threat actors are using sophisticated digital tactics to impersonate legitimate businesses, hijack freight, and steal high-value shipments from transportation and logistics companies. This trend has led to substantial financial losses, with incidents becoming more widespread and advanced since 2024. Source: The […]

Why it matters: Indian transportation and logistics companies must enhance their digital security, supply chain verification, and anti-impersonation protocols to mitigate similar sophisticated cyber-enabled theft risks.
General High 4 May

New Microsoft Teams Phishing Attacks Use Email Bombing, Fake IT Support

A new wave of cyberattacks is leveraging email bombing and fake IT support calls on Microsoft Teams to trick employees. These sophisticated phishing campaigns aim to gain remote access to user devices. Security researchers warn these attacks are increasing and pose a significant threat. Source: Cybersecurity News

Why it matters: Indian critical infrastructure organizations must enhance employee training on phishing awareness and implement robust email and collaboration platform security measures to counter these evolving threats.