Midnight Web by Rahul Banerjee

The material is said to contain customer and corporate banking information, including Aadhaar numbers , names and loan records drawn from several branches across India. Software engineer and Cashless Consumer founder Srikanth Lakshmanan posted those samples on X and said the link was active. He said, "It's a cyber disaster ." The threat actor says the exposed dataset contains savings and current account information, loan records, Net Banking user details , NRI and corporate banking service records, customer support material, and records related to branches or ATMs. Lakshmanan said the issue was first noticed on dark web tracking site www.ransomware.live He said the information made public appears to include both internal Bank of Baroda records and customer-related material. "I was able to initially verify the documents and have found a range of internal documents of the bank," he said. "This includes branch audits, loan appraisal documents, in...

ChatGPT 5.6 is OpenAI's flagship AI model family, featuring major enhancements in coding, programmatic tool-calling, and agentic workflows. Released alongside ChatGPT Work, these models deeply integrate software development tools and contextual work apps (like Drive and Slack) into the standard ChatGPT experience. The GPT-5.6 Sol model wiped files on users machines. OpenAIs own safety card had already flagged the GPT-5.6 Sol model for taking destructive actions more often than its predecessor. If you run AI coding agents on your machine these 7 safeguards would have prevented the GPT-5.6 Sol model from causing damage. 1. Sandbox your environment Run agents inside Docker containers or Firecracker microVMs of on your bare machine. The agent gets a workspace without ever touching your actual system and if it runs a destructive command the damage stays inside the sandbox. 2. Mount only the project folder Never give an agent access to your home directory. Mount the folder the ...

MEERUT,India  The website belonging to the Meerut Development Authority (MDA) in Meerut has been defaced recently following an attack by some anonymous threat actors that resulted in the defacement of the government-run website with anti-India and pro-Pakistan messages. Those attempting to visit the MDA website recently were met with a black screen with political slogans, instead of visiting the normal interface of the website offering services like construction approval, announcements, etc. The attackers have also revealed their identity through the defacement of the site, with "Overthrush1337" being the name used by them. This is obviously a typical case of website defacement in which the attackers gain access to the web server and deface it to make changes to the content available on the website. Attack Timeline Initial Compromise and Defacement of Website Based on preliminary reports, it appears that the hackers could have taken advantage of an unpatched vul...

Recently, attackers took over high-profile Instagram accounts, including the official Obama’s White House account and a United States Space Force chief officer. The attacker didn't break any Instagram code or crack passwords. They convinced Meta's own AI support chatbot to hand over the accounts. Meta uses an AI-powered support chatbot to help users recover locked accounts, change recovery emails, and handle account issues. The chatbot is trained to verify identity through questions and decide whether a request looks legitimate. Attackers figured out how to manipulate that decision making process. Video Credit-  x.com/chetaslua The attack consists of four main steps. Step 1: The attacker contacts Meta's AI support chatbot claiming to be the legitimate owner of a target account. They simply use Instagram's help interface and start an account recovery conversation. For high-profile targets, attackers use publicly available information such as display names, profile bios, ...

  A new wave of malicious iOS applications has been uncovered on Apple’s App Store, disguising themselves as legitimate cryptocurrency wallets to steal users’ sensitive data. The campaign, identified by cybersecurity researchers at Kaspersky and dubbed FakeWallet , has reportedly been active since at least late 2025. According to the findings, at least 26 fraudulent apps were distributed through the platform, impersonating popular crypto wallet services. These apps used cloned logos, familiar branding, and slight variations in names to appear authentic and rank in search results. Their primary goal was to trick users into entering their recovery phrases critical credentials that grant full access to cryptocurrency funds. The campaign appears to have been particularly active in regions like the Chinese App Store, where restrictions on official crypto apps create a gap that malicious actors can exploit with convincing imitations. Fake website impersonating Ledger Source: Kaspersky Af...

  I am going to break down the story of a tool that I'm willing to bet you've used, but whose incredible business journey you probably know nothing about. Honestly, this is a master class for any founder looking to build something valuable from scratch. I am calling it the Bootstrapper’s Playbook. A Wild Reality Check Let’s just start with a wild fact. There's a website out there, a deceptively simple one, that in places like India pulls in more traffic than Amazon. I'm serious. Millions and millions of people rely on it every single day. Any guesses? It's iLovePDF. If you've ever needed to quickly merge, split, or compress a PDF file, you've almost definitely landed on this site. But what most people have no idea about is how this massive global platform was built. And that is where the real story begins. Born from Frustration So, let's go all the way back to the beginning. Because this whole thing wasn't born from some grand business plan or a fanc...