Your Vendor Had a Data Breach: What to Do in the First 48 Hours
A vendor data breach plan for Indian businesses: the CERT-In 6-hour rule, DPDP duties, what to revoke and rotate, and what to ask your supplier.
A vendor data breach plan for Indian businesses: the CERT-In 6-hour rule, DPDP duties, what to revoke and rotate, and what to ask your supplier.
October 2026 data breaches in India and worldwide: SBI, eMudhra, Japan's record month, health and developer-platform leaks, and what to do now.
Stolen ConnectWise app credential was used for Microsoft 365 tenant takeover attempts. How M365 admins and MSPs can check apps, logs and mailboxes.
Rank Math PRO backdoor in 3.0.123 (15-16 Oct 2026): who is affected, WP-CLI checks for the published IOCs, and the clean-up order before 3.0.124.
The OVHcloud CLI was swapped for a stealer and Railway exposed environment variables. Learn who is affected and how to rotate secrets after each incident.
LiteLLM 1.107.0 on PyPI and Docker Hub carried a credential stealer on 21 Oct 2026. Check if you installed it, clean up safely and rotate the right secrets.
Stolen UpdraftCentral keys were used to backdoor WordPress sites from 18 October 2026. Who is affected, how to update and delete keys, how to detect the backdoor and how to clean up.
We fact-checked all 27 incidents in the viral "Black October" list: PHP2Shell, eMudhra, SBI, GitLab, LiteLLM, UpdraftPlus and more. What is real, what is exaggerated, and what Indian organisations should patch now.