October is Cybersecurity Awareness month and we still have some days left. 🥲
🇮🇳 🚨 INDIA: EVIL MARKHORS CLAIMS BREACH OF BHARAT ELECTRONICS (BEL), DEFENSE FIRM'S PERSONNEL AND SHAREHOLDER KYC DATA ALLEGEDLY LEAKED
The hacktivist group Evil Markhors claims it breached Bharat Electronics Limited (BEL), India's state-owned defense electronics manufacturer, and leaked about 1 GB of internal data (around 1,069 files).
The actor claims:
* A roster of roughly 18,000 to 19,500 retirees and spouses
* 23,553 shareholder KYC records, including PAN, Aadhaar and dates of birth
* More than 50,000 rows of recruitment candidate data
* Around 6,000 health-benefit portal accounts, working login credentials and organizational digital-signature private keys
⚠️ Analyst Note:
If real, the Aadhaar and PAN data puts shareholders and staff at high risk of identity fraud and targeted phishing, and stolen credentials or signing keys could be used against BEL systems and its defense supply chain. Hacktivist groups in this space have a history of exaggerated claims. BEL has not confirmed an incident. Unverified threat-actor claim, NOT confirmation of a breach.
#DDW #DarkWeb #India #Defense #DataBreach #ThreatIntelligence
Update python as well to latest version and other pip packages as it is affected by eMudhra certificate.
discuss.python.org/t/informa…
One more cyber data breach
🇮🇳 🚨 INDIA: SCARLETTGROUP CLAIMS RAJASTHAN POLICE ON ITS LEAK SITE
The data-extortion group ScarlettGroup has listed Rajasthan Police, the state law enforcement agency of Rajasthan, India, as a victim on its leak site.
The listing carries only a generic description of the force. No data volume, file list or sample has been shown, and the group has not said what it allegedly took.
ScarlettGroup is a new actor that surfaced in October 2026. It is also behind the extortion claim against US software company Genesys, which has since confirmed unauthorized access to its internal CRM and learning systems.
The Rajasthan Police claim has not been independently verified, and the force has not publicly confirmed an incident.
⚠️ Analyst Note:
Days before the listing, the Rajasthan Police cyber wing warned government staff that leaked official email credentials were circulating on the dark web, with risk to state SSO, SecLAN and RajSWAN systems. That advisory does not confirm this claim, but credential exposure is a common entry point. We assess this as an unverified threat-actor claim, NOT confirmation of a breach.
#DDW #DarkWeb #India #Rajasthan #RajasthanPolice #ScarlettGroup #Ransomware #Extortion #LawEnforcement #ThreatIntelligence #CyberSecurity
First initial targets are ofcourse all government organisations using eMudhra certificates.
Cooked everyone
🚨 UPDATE: India has launched a special investigation into eMudhra after 8 intermediate CA private keys were found trivially recoverable.
CERT-In and Red Hat have issued fresh security alerts as the fallout extends beyond Chrome, Firefox, and Go.
Read - thehackernews.com/2026/10/ei…
Almost 70% of global traffic affected by PHP vulnerability. Majority of sites taken down to prevent any adverse effect on data.
Cyberattacks are on rise impacting many platforms and sites that use PHP.
