Latest Edition
The Ministry of Cyber Affairs

IP geolocation APIs, at APNIC 62, the IAB’s workshop report highlights why model is broken and possible fixes
Commercial IP-to-geolocation APIs sit behind fraud checks, geo-blocking, tax rules, CDN steering and content licences. They return a city, a pair of coordinates and an air of certainty. This week’s APNIC 62 Cooperation SIG in Mumbai, drawing on the IAB Workshop on IP Address Geolocation, argued that certainty is the product defect: an IP address was never a location, and treating the API as one creates bad routing, weak security and a quiet privacy leak.

I4C Recruitment 2026: 30 Cyber Forensics, OSINT and AI/ML Jobs at Up to ₹2.5 Lakh a Month, Apply by 30 September
F1 InfoTech is hiring 30 cyber forensics, OSINT and AI/ML professionals for I4C (MHA). New Delhi and Assam postings, up to ₹2.5L a month. Apply by 30 Sep 2026.

Pakistan's Cybercrime Investigation Agency nabs 15 in back-to-back raids, Canada work-visa fraud
Faisalabad officers arrest eight more suspects a month after a 14.4-million-rupee case, as NCCIA steps up action against fraud targeting Pakistanis seeking jobs in Canada. The action targets scams that exploit Pakistanis seeking overseas employment opportunities, part of NCCIA's broader efforts to combat cyber-enabled immigration fraud through its Faisalabad regional unit.

Spacex Starlink Gen3 recovered from Zambia's scam facility, 79 apprehended including foreign nationals
79 suspects were apprehended in a transnational cybercrime scam centre operating in Lusaka, Zambia. Multiple Starlink terminals were seized in the operations. Authorities have indicated that the illegal setup was a national security threat. 11 Chinese nationals were apprehended in the operation.

Singapore police outfit Digital Disruption Centre blocks VestoFX Trader Investment App
Singapore Police Force’s Digital Disruption Centre sits under the new Cyber Command, launched on 3 July 2026 at Police Cantonment Complex, and is the unit tasked with finding and taking down online threats before they reach the public—scam sites and other scam enablers, ransomware and malware, and content that is racially or religiously inflammatory—using tools such as AI-assisted detection and powers under the Online Criminal Harms Act rather than waiting for victims to report after the fact.

Bangladesh asked Google to pull predatory loan apps. Weeks on, several are still on the Play Store
Google built that licence-verification machinery in response to almost exactly this crisis in India, Kenya, Nigeria and Pakistan between 2021 and 2023. It has not extended it to Bangladesh, a market of some 190 million people where every one of the preconditions — heavy microcredit demand, near-universal mobile wallets, and an app economy running well ahead of its regulator — is present.
Fake Boss Scam hits Taiwan: How a Gmail Note and a LINE QR Code Became Taiwan’s Corporate Heist Kit
A Lumen Database filing shows Google was asked to kill Gmail accounts used to impersonate Fubon Group chairman Cai Mingzhong and a Taichung mutual-aid chief. The pitch is almost polite: create a chat group, send the QR code, then “advance” a company payment. Police say one earlier run of the same script cost a firm about NT$17 million — and Taiwan’s anti-fraud law is now pulling Google into the fight on two fronts, mailboxes and ads.

Four Chinese Nationals Arrested in Nairobi Over SIM-Swapping and Money-Laundering Scheme
Recent months have also seen several cases involving Chinese nationals arrested in Kenya on cyber-related charges. In July 2026, detectives arrested 18 Chinese nationals in a Kilimani apartment described as a suspected cyber fraud workstation, recovering phones, passports and cash.

India’s Power Grid Gets a Binding Cyber Security Rules : What Changes From April 2027
Binding operational-technology (OT) rules for electricity exist in a handful of jurisdictions. Most of the world still runs plants on vendor advice, IEC 62443 contracts and national CERT circulars. That difference matters. A guideline can be ignored. A reliability standard or a critical-infrastructure statute can shut a control room or fine a board.

The 5-Pillar Framework: What It Really Takes To Be a Successful Cybercrime Investigator
Technology has made cybercrime investigation extremely difficult. A successful investigator needs to master multiple skillset to compete with the criminal's anti-forensic & detection methods

Broker Asking for Money to Unlock Your Funds? Why It Is Always a Scam
A trading dashboard shows a profit, the withdrawal fails, and then comes a demand for a fee, a tax or a margin top-up to release it. No SEBI-registered intermediary ever asks you to send money to free your own funds. How the advance-fee trap works, and how to verify a broker's payment details in 60 seconds.

Delhi Police Bust Fake ‘Bretish Airways’ Job Racket; Six Arrested in Organised Aviation Scam
Additional Deputy Commissioner of Police (Central) Prashant Chaudhary confirmed that Sandeep Kumar had earlier worked as a tele-caller for similar fake aviation-job operations and had previously run a fraudulent venture called “Pragati Airways” before partnering with Akhil Kumar.

Belagavi City Police hold workshop on investigation and collection of electronic evidence
The session was organized by Belagavi City police in association with Shreshta IT Technologies Pvt. Ltd. on the theme "Electronic Evidence: From First Response to Courtroom Proof" and was attended by over 40 senior police officers.
Suspected Chinese Bot farm of approx 200,000 accounts, involved in influence operations idenfied by X
X’s disclosure of a suspected Chinese bot farm targeting the U.S. AI data-center debate reveals a sophisticated, AI-enabled influence effort that exploits genuine energy-grid stress in the Mid-Atlantic to slow American technological scaling.
Singapore's Elderly Bear Heaviest Losses as Scams Evolve: Police
Elderly victims aged 65 and above made up 14.4% of all scam victims in the first six months of the year, down from 15.0% a year ago. Yet the average amount lost per elderly victim rose to S$42,347 from S$35,374 in the same period last year — the highest among all age groups.
Meta Platforms Accounted for More Than a Third of Singapore Scam Cases in First Half of 2026, Police Report Shows
While police disruption efforts intensified, with over 37,500 WhatsApp lines and 31,600 online monikers taken down, scammers continue to exploit Meta's social reach and messaging scale to run e-commerce, job and investment scams — using Facebook ads to lure victims before shifting them to WhatsApp groups for the final con.

Is OnePay Genuine? What Users Should Check Before Installing | Chinese 刷单 (brushing / order-completion) pattern
OnePay resembles like Chinese 刷单 (brushing / order-completion) pattern used by illegal payment gateways

Threat Intelligence: DMCA-Themed Credential Phishing Targeting X (Twitter) Users
Campaign Focus: contentviolations-x.com and Related -x.com Infrastructure

IIT Kanpur’s C3iHub Rolls Out Intensive Cybersecurity Training for Uttar Pradesh Power Sector Officials
C3iHub’s specialised training equips participants with hands-on skills in OT threat detection, industrial protocol security (such as Modbus and IEC 61850), IT-OT convergence risks, and realistic attack simulations on control systems, enabling power sector professionals to better protect critical infrastructure from targeted cyber threats.

AI Agent Security: A Practical Field Guide for Engineers
How Black Hat USA 2026 reframed agents as systems that browse, run code, and move credentials—and what to do about it. Bottom line: agents are not safer chatbots; they are automation with a probabilistic parser on the front. Design them like production automation that accepts hostile input—because they do.
India's banking regulator (RBI) does not want the CISO Reporting to IT
The 2026 Directions put the CISO's reporting line in writing — outside IT, into risk, with no business targets. The RBI regulates over 9000 financial entities, ranking one of largest in the world.