CERT-In
Latest
Tata Motors iRA app flaws could let attackers impersonate car owners
CERT-In has rated four flaws in Tata Motors' iRA 2.0 and iRA.ev mobile apps as High severity. They cover embedded credentials, WebView token exposure, authentication tokens in logs and weak SSL certificate pinning, and could allow credential theft, owner impersonation and traffic interception. Researcher Pranav Rajendran is credited with reporting them, and CERT-In reports no active exploitation.
CERT-In warns of ongoing AI-assisted attacks on Indian banking and financial firms
CERT-In has disclosed that an AI-assisted threat actor it tracks as Crafty Falcon is targeting organisations in the BFSI sector in India. The activity is described as active and ongoing and involves publicly available AI-driven offensive security tools. The excerpt provided does not include technical details or mitigations.
India's CERT-In gets access to Anthropic's Mythos AI model
CERT-In will use Anthropic's Mythos AI model to identify cyber vulnerabilities and improve its response to emerging threats, with access restricted to trusted organisations because of misuse concerns about advanced AI models. The Telecom Regulatory Authority of India is also proposing guidelines for the responsible use of AI in telecommunications.