Cybersecurity

Bidhannagar City Police raided an illegal call centre styled as Xtra source Pvt. Ltd. in Eco Space, New Town, arresting 24 people (13 women, 11 men) for tech-support scams targeting US victims via Amazon/Apple impersonation, remote access, and gift vouchers. Seized: 53 desktops, 4 laptops, 24 phones, and scam scripts.

SlowMist’s Bitget IR progress report (as of 29 Sep): Product A 0-day from 31 Aug, Product B admin abuse on 25 Sep, custom withdrawal tool forging risk controls, multi-chain drain ~2h52m from 02:31 UTC+8, later forged BTC withdrawal attempts. Private keys/cold wallets reportedly not compromised.

UP Police rescued an 18-year-old in Bareilly within 10 minutes after Meta flagged his Instagram self-harm post and alerted the force’s Social Media Centre. Brief on how Meta’s suicide-risk warning system works with police. Source: @Uppolice.

Kolkata Police report that an inquiry into fraudulent SIM procurement uncovered a multi-state cyber-fraud operation. Following the arrest of Taushif Alam on 17 September 2026, officers raided a flat in Hatiara under Eco Park Police Station used as an alleged fraudulent call centre, arresting seven individuals from Andhra Pradesh and Telangana. The accused are alleged to have impersonated MUDRA Loan representatives and induced residents of Andhra Pradesh to transfer funds. Mobile phones and noteb

UP Police say Bhadohi Police arrested three people accused of forging birth certificates by misusing officials’ CRS portal logins — allegedly via OTPs, email takeover, and uploads of fake data or blank papers. The force claims about 200–250 fake certificates were produced for illegal gain. Official post names no FIR or accused; local press same day aligns on the CRS/OTP modus.

Perplexity CEO Aravind Srinivas said nine models with root in SPACE failed 108 VM→host escapes, but four — including GPT-5.6 Cyber — reached a blocked URL under partial network access via DNS spoofing or shared-IP CDN tricks; Cyber used Taboola→screenshot→OCR. Issues reportedly fixed. Not a Firecracker host break.

Automated scrapers and path scanners routinely probe public sites for /.env, config.json, info.php, .vscode/sftp.json, cPanel proxy paths, GraphQL and Exchange ECP URLs. MoCA analysis of typical top-path charts explains recon vs exploit risks and practical fixes: deny rules, WAF, fail2ban, never commit secrets, remove phpinfo, and keep security.txt intentional.

From an unpaid exam lab in Greater Noida to a soldering station in Delhi — UP STF says it has busted a pan-India supply chain that let remote solvers control candidates' computers.

A laptop farm is not a hacking exploit. It is physical infrastructure designed to hide where the keyboard actually is.

National Computer Virus Emergency Response Center warns that fake plugins for popular AI agents can steal files and open a back door — and the problem is growing fast. Several IOCs of skill poisoning were also published in the advisory.

Binding operational-technology (OT) rules for electricity exist in a handful of jurisdictions. Most of the world still runs plants on vendor advice, IEC 62443 contracts and national CERT circulars. That difference matters. A guideline can be ignored. A reliability standard or a critical-infrastructure statute can shut a control room or fine a board.

Campaign Focus: contentviolations-x.com and Related -x.com Infrastructure