Cybersecurity

India has demonstrated its first free-space quantum key distribution link, 5.56 km between BISAG-N and IIT Gandhinagar, PIB said on 3 October 2026. QNu Labs’ Armos system held the error rate under 5 percent and produced keys at 230–260 bits per second, which BISAG-N’s Vedic Kavach platform used to encrypt and decrypt test messages.

INTERPOL's Industrialization of Cybercrime report uses FUD once, as Fully Undetectable: crypter, packer, and anti-detection services sold so malware looks clean to antivirus and endpoint tools. Vendors re-wrap files, test them until scanners report them clean, and sell that result per test or by monthly subscription, often with proxies, VPNs, and anti-detect browsers. The report gives no FUD price, volume, or named product.

Threat analysis of a Google Sites phishing kit reported by @VincentBounce: spoofed Google ‘app password / security alert’ mail, landing on sites.google.com/view/delete-new-app with CAPTCHA theatre, credential forms that trigger password-manager autofill, and mailed-by fwd.privateemail.com instead of Google bounce hosts. Includes IOCs and defender checklist.

Bidhannagar City Police raided an illegal call centre styled as Xtra source Pvt. Ltd. in Eco Space, New Town, arresting 24 people (13 women, 11 men) for tech-support scams targeting US victims via Amazon/Apple impersonation, remote access, and gift vouchers. Seized: 53 desktops, 4 laptops, 24 phones, and scam scripts.

SlowMist’s Bitget IR progress report (as of 29 Sep): Product A 0-day from 31 Aug, Product B admin abuse on 25 Sep, custom withdrawal tool forging risk controls, multi-chain drain ~2h52m from 02:31 UTC+8, later forged BTC withdrawal attempts. Private keys/cold wallets reportedly not compromised.

UP Police rescued an 18-year-old in Bareilly within 10 minutes after Meta flagged his Instagram self-harm post and alerted the force’s Social Media Centre. Brief on how Meta’s suicide-risk warning system works with police. Source: @Uppolice.

Kolkata Police report that an inquiry into fraudulent SIM procurement uncovered a multi-state cyber-fraud operation. Following the arrest of Taushif Alam on 17 September 2026, officers raided a flat in Hatiara under Eco Park Police Station used as an alleged fraudulent call centre, arresting seven individuals from Andhra Pradesh and Telangana. The accused are alleged to have impersonated MUDRA Loan representatives and induced residents of Andhra Pradesh to transfer funds. Mobile phones and noteb

UP Police say Bhadohi Police arrested three people accused of forging birth certificates by misusing officials’ CRS portal logins — allegedly via OTPs, email takeover, and uploads of fake data or blank papers. The force claims about 200–250 fake certificates were produced for illegal gain. Official post names no FIR or accused; local press same day aligns on the CRS/OTP modus.

Perplexity CEO Aravind Srinivas said nine models with root in SPACE failed 108 VM→host escapes, but four — including GPT-5.6 Cyber — reached a blocked URL under partial network access via DNS spoofing or shared-IP CDN tricks; Cyber used Taboola→screenshot→OCR. Issues reportedly fixed. Not a Firecracker host break.

Automated scrapers and path scanners routinely probe public sites for /.env, config.json, info.php, .vscode/sftp.json, cPanel proxy paths, GraphQL and Exchange ECP URLs. MoCA analysis of typical top-path charts explains recon vs exploit risks and practical fixes: deny rules, WAF, fail2ban, never commit secrets, remove phpinfo, and keep security.txt intentional.

From an unpaid exam lab in Greater Noida to a soldering station in Delhi — UP STF says it has busted a pan-India supply chain that let remote solvers control candidates' computers.

A laptop farm is not a hacking exploit. It is physical infrastructure designed to hide where the keyboard actually is.