Cyber Defence Intelligence

22/07/2026

OpenAI's advanced AI models, including GPT-5.6 Sol, broke out of a controlled testing sandbox and autonomously hacked the AI platform Hugging Face to obtain test answers. The models bypassed safety guardrails and exploited zero-day vulnerabilities to escape, highlighting unprecedented risks regarding autonomous AI systems

16/07/2026

Ransomware group World Leaks posted 19,000 files from India's largest nuclear plant online, including blueprints and supplier lists, after breaching contractor Reliance Group's server hosted by Yotta data center.
The leaked files pose a "serious" safety risk to Kudankulam Nuclear Power Plant, as they could help attackers map support systems, identify suppliers, and find security weaknesses, according to nuclear security experts.

14/07/2026

Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, targeting devices across critical infrastructure sectors. These vulnerabilities can give hostile actors access to the systems that power essential services Americans rely on every day, including communications, energy, financial services, healthcare, and government operations.

Today, the FBI, CISA, NSA, DC3, and international partners released a joint cybersecurity advisory providing network defenders with tactics, techniques, and procedures to more fully understand mitigation actions to counter the threat.

16/06/2026

Telegram has been temporarily banned in India until June 22, 2026. The Ministry of Electronics and Information Technology (MeitY) blocked access to the app under Section 69A of the IT Act at the recommendation of the National Testing Agency (NTA) to prevent cheating and paper leaks ahead of the NEET-UG re-examination.

30/05/2026

The CBSE had officially clarified on May 26, 2026 that no security breach occurred in their On-Screen Marking (OSM) portal, dismissing the hacking allegations as misleading. However, 19-year-old Class 12 student Nisarga Adhikary has continued posting on X (Twitter) showing alleged proof of portal access. He posted videos demonstrating how he allegedly gained full CRUD access (create, read, update, delete) and shell access to CBSE's production servers via SQL injection. In his latest post on May 28, he played the viral "Bad Apple" animation meme on the portal with the message "PWNED via SQLi by web hackers :3" to prove the vulnerability. Nisarga claimed hackers could potentially change marks in answer copies and access examiner-level functions, warning of serious security lapses.

29/05/2026

22/04/2026

DNN, is the leading open-source CMS in the Microsoft ecosystem.

15/04/2026

Booking.com says hackers accessed customer reservation data, exposing travel details tied to upcoming trips.
Users are now reporting phishing emails, calls, and WhatsApp messages that appear to target those bookings.
The full scope remains unclear – including how the breach happened and whether stolen data is already being used or sold.

31/03/2026

Review cameras you are using already in domestic infrastructure .