The Sentinel
The Sentinel is the research desk, writing long-form, deeply-sourced reports on the security of AI, the economics of cyber-fraud, and the technology and law emerging to fight back. One definitive piece on a topic, not the daily churn.
Ministry of Cyber Affairs writers publish under pseudonyms. Our editorial model.
The Telegram Crackdown: Why India's 'New Dark Web' is Being Put on Notice
India's Delhi High Court upheld a 2026 Telegram block after the Centre called the app the "new dark web." How Telegram's design built a criminal pipeline, what the Durov arrest changed, and how six governments are now putting it on notice.
Digital Ekadashi Alerts: How Scammers Are Exploiting Religious Apps for Financial Fraud
On auspicious days, devotional apps, darshan bookings and donations surge, and so does fraud. Drawing on India's I4C advisory for pilgrims, here are the documented scam patterns, the red flags, and how to give and book safely.
You Got Tricked Into Paying. Can You Get Your Money Back? The Global Scam-Reimbursement Divide
When you authorise a scam payment yourself, are banks legally required to refund you? The answer splits sharply by country. A verified, country-by-country comparison of the world's scam-reimbursement laws.
RBI Young Professional 2026: a ₹1.5 Lakh/Month Cyber Security Role in Mumbai (and 11 Others) — Who Can Apply and How
The Reserve Bank of India is engaging 12 Young Professionals at its Mumbai Central Office, including a dedicated Cyber Security & IT Risk post, on a ₹1,50,000/month stipend. Here are the roles, eligibility, terms, and how to apply before the 6 July 2026 deadline.
I4C Warns of the 'Boss Scam': Fake RBI Files Hijack a CEO's WhatsApp to Order Fraudulent Transfers
India's I4C has issued an advisory on the 'Boss Scam', where criminals impersonate the RBI and company executives, plant malware via a .zip/.exe file, hijack the boss's WhatsApp Web session, and instruct finance staff to wire money to mule accounts. Here is how it works and how to stop it.
81 Cyber Forensic Jobs in Delhi: DSSSB Junior Scientific Assistant Recruitment 2026
Delhi's Forensic Science Laboratory is hiring 81 Junior Scientific Assistant (Cyber Forensic) posts with no experience required, plus 125 IT Assistant Grade-A posts. Here is who can apply, the pay, and how to apply before the 15 July 2026 deadline.
Block the App, Not Just the Post: How a Leaked Exam Got Telegram Switched Off Across India
The Delhi High Court upheld a nationwide, time-limited block of Telegram over NEET-UG 2026 exam-leak misuse, ruling that Section 69A can switch off an entire app, not just a post. What the judgment said, and why it matters.
Make Claude Opus Punch Above Its Weight: Security Testing With Skills, Subagents and Smart Workflows
You do not need Claude's newest or largest model to do serious security work. With skills, parallel subagents, adversarial verification and the right tooling, a widely available model like Opus produces security analysis that rivals a top-tier frontier model. A practitioner's guide to the building blocks, the workflow, the open Trail of Bits skills, and the guardrails that keep the agent from becoming the vulnerability.
Hong Kong Arrests 150 in HK$320 Million World Cup Betting Syndicate Bust
Hong Kong's Organized Crime and Triad Bureau arrested about 150 people and dismantled a triad-linked online gambling syndicate that processed more than HK$320 million in illegal bets since July 2025, in a World Cup crackdown that seized cash, luxury goods, and the dummy bank accounts used to move the money.
Investigating Deepfakes and Synthetic Media
A practical guide to investigating deepfakes and synthetic media: why detection is unreliable, building a provenance case with C2PA and SynthID, a verification and chain-of-custody workflow, the scale of the threat, and the India, US, UK and EU legal framework compared.
Cloud Evidence: Getting Data from AWS, Azure and Google Cloud
How to get evidence from the major cloud providers: the shared-responsibility boundary, identifying the account behind an IP, preservation, the AWS, Azure and Google law-enforcement portals, the US CLOUD Act and bilateral agreements, and the India, US, UK and EU framework compared.
IP and Domain Attribution: Turning an Address into a Suspect
How investigators lawfully turn an IP address or domain into an identified suspect: RIR and RDAP lookups, the timestamp and CGNAT traps, unmasking sites behind a CDN, registrar requests, VPN and Tor limits, preservation, and the India, US, UK and EU legal process compared.