Multiple cybersecurity incidents and vulnerabilities have raised concerns over data privacy and online security. The issues involve banking records, website security and digital certificate systems. The developments include a suspected data leak involving State Bank of India (SBI) customers, compromised cryptographic keys linked to eMudhra, and a critical vulnerability in PHP. Companies and security teams have urged affected users and organisations to investigate potential risks and apply necessary security updates. (Image AI generated)

SBI probes suspected data leak affecting 3,897 customers | The State Bank of India is investigating a suspected data leak after 3,897 records containing customers' personal information were identified in a dataset found on the dark web. In a filing dated October 21, the bank said a preliminary review of around 3.75 lakh records identified information including names, mobile numbers, dates of birth, email addresses and residential addresses, along with banking-related identifiers and loan lead details. SBI said it received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the CERT-In. The bank has activated its incident response procedures and appointed an independent cybersecurity agency to investigate the matter. "We wish to submit that this does not have any material impact on Bank’s Core business operations, financial performance or business continuity," the bank said. (Image CNBCTV18.com file)

eMudhra reports compromised cryptographic keys | Bengaluru-based eMudhra has disclosed that weak private cryptographic keys associated with eight intermediate digital certificates were compromised. The compromised keys could potentially allow malicious actors to forge certificates and impersonate websites, raising concerns about the security of online connections.

Source link