Correspondent
Security correspondent
Aditya Banerjee writes about breaches and the boring facts of who got in. He would rather be late than wrong about attribution.
Yes Bank tightened beneficiary name-matching on inbound UPI collect requests after a September wave of spoofed merchant handles fooled customers who saw plausible display names but paid shell accounts.
MeitY told state-run data centers to patch lingering Log4j forks and Apache Struts-adjacent libraries before Navratri week spikes e-governance traffic, after CERT-In logged unpatched instances on NIC-hosted portals.