The Shift to Automated Compliance Platforms, ETCISO https://etimg.etb2bimg.com/thumb/msid-133231913,imgsize-28038,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/compliance-spending-shifts-from-people-to-platforms-mid-year-grc-trends-2026.jpg The biggest governance conversations happening inside Indian organizations this year are no longer confined to compliance teams. They are happening inside product meetings where engineers are redesigning consent flows. They are surfacing in boardrooms, where a string of cyber incidents has sharpened the focus on resilience and directors increasingly want live risk ...
Read More »Vulnerabilities & Exploits
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release https://firewalls.firm.in/wp-content/uploads/2026/08/poc.jpg Ravie LakshmananAug 13, 2026Vulnerability / Enterprise Security Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It ...
Read More »India’s average data breach cost rises to record Rs 25.5 crore in 2026
India’s average data breach cost rises to record Rs 25.5 crore in 2026 https://etimg.etb2bimg.com/thumb/msid-132820611,imgsize-193368,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/indias-average-data-breach-cost-rises-to-record-rs-25-5-crore-in-2026.jpg The average cost of a data breach in India rose to a record Rs 25.5 crore in 2026, marking a 15.9 per cent increase from Rs 22 crore last year, according to IBM’s 2026 Cost of a Data Breach Report released on Monday. The report said ...
Read More »Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer https://firewalls.firm.in/wp-content/uploads/2026/08/npms.jpg A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. “These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them ...
Read More »Building trust in healthcare data: From pipelines to patient care
Building trust in healthcare data: From pipelines to patient care https://etimg.etb2bimg.com/thumb/msid-132711155,imgsize-71975,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/building-trust-in-healthcare-data-from-pipelines-to-patient-care.jpg In every healthcare organization, multiple validations are done before go-live. But once systems are live, changes continue, and trust in the data and process can begin to erode. Treating data trust as a one-time pre-launch step rather than an ongoing discipline leads to failed analytics, compliance exposure, and unreliable ...
Read More »Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes https://firewalls.firm.in/wp-content/uploads/2026/08/coldcard.jpg Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware ...
Read More »BoB data breach puts spotlight on banking cybersecurity as sensitive customer records surface on Dark Web
BoB data breach puts spotlight on banking cybersecurity as sensitive customer records surface on Dark Web https://etimg.etb2bimg.com/thumb/msid-132725840,imgsize-17566,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/bob-data-breach-puts-spotlight-on-banking-cybersecurity-as-sensitive-customer-records-surface-on-dark-web.jpg The alleged data breach at Bank of Baroda (BoB) is triggering fresh concerns over cybersecurity posture as well as preparedness in India’s banking sector after sensitive customer records, including Know Your Customer (KYC) documents, surfaced on the dark web. The incident has the ...
Read More »DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware https://firewalls.firm.in/wp-content/uploads/2026/07/all-secure.jpg Ravie LakshmananJul 30, 2026Malvertising / Cryptocurrency Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious ...
Read More »Australian regulator says Telegram breached online safety law
Australian regulator says Telegram breached online safety law https://etimg.etb2bimg.com/thumb/msid-132725875,imgsize-17457,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/australian-regulator-says-telegram-breached-online-safety-law.jpg Australia’s cyber safety watchdog took court action Thursday against Telegram, alleging the global messaging platform had failed to remove terrorism material. Under Australia’s online safety law, Telegram faces a maximum penalty of up to AU$54.6 million ($38 million). The development comes a day after Russia announced it was seeking the arrest ...
Read More »Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory https://firewalls.firm.in/wp-content/uploads/2026/07/mcp.jpg Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all versions of the project before version 3.16.3. It ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











