Indian digital certification authority eMudhra has reported a compromise of private keys for some of its global TLS and code-signing certificates, according to Cert-In. This incident, while eMudhra states it has limited impact on its Indian operations, could allow cybercriminals to impersonate websites. Separately, SBI has disclosed a suspected exposure of nearly 4,000 customer records on the dark web.
India's largest bank, SBI, is investigating the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web. The bank received alerts on October 16 and has initiated cyber incident response protocols, engaging an independent cybersecurity agency. While a detailed assessment is underway, SBI states the incident has not materially impacted its core business operations. This comes as CERT-In also warned last week about autonomous AI agents accessing confidential data and reported a compromise of eMudhra's private keys.