<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Threat Atlas India: stories</title><link>https://threatatlasindia.com/stories/</link><description>Visual explainers on cyber threats in India: ransomware victims by month, state and sector, who the attackers are, India-specific scams, and the rules organisations must follow after an attack.</description><language>en</language><lastBuildDate>Thu, 29 Oct 2026 23:27:46 +0000</lastBuildDate><atom:link href="https://threatatlasindia.com/feed.xml" rel="self" type="application/rss+xml"/><item><title>Film censor board documents on more than 500 films were posted online: what is known</title><link>https://threatatlasindia.com/stories/cbfc-film-documents-exposed/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/cbfc-film-documents-exposed/</guid><pubDate>Sun, 25 Oct 2026 06:00:00 +0000</pubDate><category>Breaches</category><description>The Hindu reports that scripts, cut orders and distribution contracts tied to more than 500 films filed with India&#x27;s film censor board were downloadable online. The board says it has found no trace of unauthorised access. What is reported, what the board says, and what is unknown.</description></item><item><title>Vehicle owners&#x27; details for ₹5: what is known about the Vahan and Sarathi data sale</title><link>https://threatatlasindia.com/stories/vehicle-data-sale-morth-audit/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/vehicle-data-sale-morth-audit/</guid><pubDate>Sun, 25 Oct 2026 06:00:00 +0000</pubDate><category>Breaches</category><description>Researchers found Indian vehicle-owner details on sale for as little as ₹5 a lookup. The road transport ministry is reported to have ordered a CERT-In audit of four portals. What is confirmed, what is only reported, and what the official numbers show.</description></item><item><title>An AI-assisted hacker took 5,200 records from an Indian university: what the report says</title><link>https://threatatlasindia.com/stories/deepseek-indian-university-breach/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/deepseek-indian-university-breach/</guid><pubDate>Fri, 23 Oct 2026 06:00:00 +0000</pubDate><category>Breaches</category><description>Palo Alto Networks&#x27; Unit 42 says an attacker using DeepSeek V4 took a database of more than 5,200 student and faculty records from an Indian public university through a weak admin password. What the report confirms and what it leaves out.</description></item><item><title>PHP2Shell: the flaw in the engine behind much of the web</title><link>https://threatatlasindia.com/stories/php2shell-india/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/php2shell-india/</guid><pubDate>Thu, 22 Oct 2026 06:00:00 +0000</pubDate><category>Vulnerabilities</category><description>Two critical flaws in PHP itself let attackers take over web servers with a single request. What PHP2Shell is, what CERT-In says, and what to do if you run a website.</description></item><item><title>Patch week: GitLab, Node.js, Java, Plex, VeloCloud and FortiSIEM, one by one</title><link>https://threatatlasindia.com/stories/patch-week-gitlab-nodejs-plex/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/patch-week-gitlab-nodejs-plex/</guid><pubDate>Thu, 22 Oct 2026 06:00:00 +0000</pubDate><category>Vulnerabilities</category><description>Six updates to check this week: a second CVSS 10 flaw in GitLab, Node.js and Java releases that both block the eMudhra certificates, Plex and Arista VeloCloud flaws now being attacked, and a critical Fortinet FortiSIEM flaw with a public exploit. What each is, and what to update to.</description></item><item><title>Amagi Media Labs: an extortion claim, what is confirmed and what is only claimed</title><link>https://threatatlasindia.com/stories/amagi-extortion-claim/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/amagi-extortion-claim/</guid><pubDate>Thu, 22 Oct 2026 06:00:00 +0000</pubDate><category>Breaches</category><description>Bengaluru media-technology company Amagi told the stock exchanges that a threat actor is trying to extort it over stolen network data. What Amagi confirmed, what a ransomware group lists, and what is still unknown.</description></item><item><title>LiteLLM 1.107.0: a trusted AI library shipped a password stealer</title><link>https://threatatlasindia.com/stories/litellm-compromised-release/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/litellm-compromised-release/</guid><pubDate>Thu, 22 Oct 2026 06:00:00 +0000</pubDate><category>Supply chain</category><description>A widely used open-source AI library had a release that steals credentials and opens a back door. What LiteLLM says happened, how to check if you were hit, and what to rotate.</description></item><item><title>Railway’s security disclosure: what to rotate, and why</title><link>https://threatatlasindia.com/stories/railway-security-disclosure/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/railway-security-disclosure/</guid><pubDate>Thu, 22 Oct 2026 06:00:00 +0000</pubDate><category>Breaches</category><description>Railway, a platform developers use to run their apps, says an attacker may have read customers’ stored secrets. What it says happened, what is still unknown, and what to rotate.</description></item><item><title>The key was 4: what the eMudhra certificate failure means for India</title><link>https://threatatlasindia.com/stories/emudhra-key-was-4/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/emudhra-key-was-4/</guid><pubDate>Wed, 21 Oct 2026 06:00:00 +0000</pubDate><category>Supply chain</category><description>Eight certificate keys of Indian certificate authority eMudhra were so weak that one was the number 4. What happened, who was exposed, and our check of 108 Indian bank, insurer, market, payment and government websites.</description></item><item><title>SBI&#x27;s dark web leak: what is confirmed, and what is only claimed</title><link>https://threatatlasindia.com/stories/sbi-dark-web-leak/</link><guid isPermaLink="true">https://threatatlasindia.com/stories/sbi-dark-web-leak/</guid><pubDate>Wed, 21 Oct 2026 06:00:00 +0000</pubDate><category>Breaches</category><description>State Bank of India says 3,897 customer records were found in a dataset of about 3.75 lakh records on the dark web. What the bank confirmed, what the seller claimed, what the rules require, and what customers should do.</description></item></channel></rss>
