Cyber World

A new cybersecurity allegation involving Rajasthan’s Department of Information Technology & Communication (DoIT&C) has raised concerns about the safety of government data in India. According to reports, a threat actor is allegedly offering a large dataset linked to the department for sale. The claimed collection contains millions of emails, personal information and potentially sensitive access-related records. However, the authenticity and full extent of the alleged breach have not been independently confirmed. What Does the Alleged Data Leak Include? According to the reported figures, the dataset contains: 5,926 mailboxes containing approximately 8.63 million emails. 22,686 email attachments with a combined size of 6.63 GB. 783,495 unique email addresses. 70,301 identity records. 59,460 mobile numbers. 69 reportedly verified credentials. 21 VPN logins and 64 VPN certificates. 1,065 mailboxes reportedly belonging to senior officers. The reported data may include...

Date: September 5, 2026 Location: Berlin, Germany Threat Actor: Rhysida ransomware group Berlin Government Hit by Ransomware Attack The Berlin government ransomware attack has raised serious concerns about data security and the protection of sensitive government information. On September 5, 2026, stolen data from two Berlin government departments was reportedly published online after the authorities refused to pay a ransom. The incident highlights how ransomware attacks are increasingly targeting public institutions, putting government records, employee information, and potentially sensitive personal data at risk. How Did the Berlin Cyberattack Happen? The attack affected two departments of Berlin's state government: Senate Department for Mobility, Transport, Climate Protection and the Environment Senate Department for Urban Development, Building and Housing Authorities reportedly detected the cyberattack on August 14, 2026, and took steps to secure the affected systems. Howeve...

  September 2026 Merrimack County in New Hampshire, USA, recently experienced a network security incident that disrupted several county computer systems and temporarily affected government services. The earliest documented impact occurred on August 25, 2026 , when county dispatchers lost access to criminal-information data through New Hampshire's IMC system. The county publicly confirmed the incident on August 26 and began working with cybersecurity specialists to investigate the unauthorized activity. What Happened? Merrimack County dispatchers were unable to access important law-enforcement information, including: Criminal records Driving information Active warrants Nearly 20 law-enforcement departments rely on Merrimack County's dispatch services. Alternative procedures were used while access to the affected system was unavailable. Despite the disruption, emergency call-taking and response operations continued . The county also took some systems offline as a precaution whil...

What if hackers don't need to break into your company to steal your customers' data? That's exactly what makes the recent Pokémon Center incident interesting. Instead of directly compromising Pokémon Center's systems, attackers targeted its trusted third-party logistics provider, CEVA Logistics . What Happened? Pokémon Center uses CEVA Logistics to ship orders to customers in the United Kingdom and Germany . On July 30 , CEVA informed Pokémon Center that it had experienced a cyberattack. While Pokémon Center itself was not directly hacked, customer information handled by the logistics provider was potentially exposed. The incident also caused disruptions to shipping and order fulfillment, including delays and cancellations. What Data Was Exposed? The potentially affected information included: Names Email addresses Phone numbers Shipping addresses Order information However, payment card details and Pokémon Center account credentials were not part of the exposed informati...

Introduction: The Rise of AI-Powered Cyber Threats The year 2026 has introduced powerful advancements in artificial intelligence, but along with innovation comes new cybersecurity risks. Generative AI tools are now being exploited by cybercriminals to create highly convincing phishing attacks, fake login pages, and malicious websites at unprecedented speed. As AI technology becomes more accessible, users must understand that everything online cannot be trusted without proper verification and research. 🤖 How Hackers Use Generative AI for Phishing Attacks Generative AI platforms allow attackers to create realistic websites and content with minimal effort. By using simple prompts such as: 👉 “Build a website that looks exactly like Okta but isn’t the same,” hackers can generate fake login portals that closely mimic legitimate services. These AI-generated phishing sites are designed to: Steal login credentials Capture authentication tokens Trick users into revealing sensitive info...

Introduction Nowadays, even children have the technology that was once only accessible to industry giants and MNC's. The difference is of maturity. This technology was once used to be for a good because as it was in safe hands, but as of now, it is seen that the the tech, the internet or the social media has both pros and cons.  If used in a good way, this may take us to reach great heights, but if used wrongly it may lead to paths which are unethical. Cyberbullying is one of the most used malpractices across the globe. What is Cyberbullying? - The practice of bullying a person or an organization by sending messages, mails or social media content of an intimidating, mocking or threatening nature. We don't know what kind of pressure of is on the person or organization who is facing cyberbullying until and unless we are a victim.  Real Life Example We already have some cases where people have some it. One of the case I recently came across is about an employee working in an MNC ...

 In India, cyber crime has emerged a lot. From password hacking to national cyber crime, Cyber crime has evolved a lot. Nowadays money is been transferred by hackers to their account from people accounts unknowingly that this is a crime . This type of Hacking or Hijacking of money of people's bank accounts by hackers is a cyber crime which must be reported in the cyber cell. In India it can be reported on the contact number 1930. MY OWN EXAMPLE Speaking about the last week, my father received a call which said - ' we are speaking from khufiya(undercover) agency, is it your son, he is going to be kidnapped and it can be stopped if my father gave the ransom amount', here my father scolded them knowing that this is a fraud call. But he took notice and asked about me from my mother. After I got to know about this, knowing this is a scam call I reported this in cyber cell (1930). Cyber cell not only takes action on the report but also spread awareness about such incidents. Again...

 Dark Web is a World Wide Web content that exists on dark net ( network that use the internet but require a specific software ). Deep and Dark web are applications of integral internet features to provide privacy and anonymity. Is it safe to use Dark Web? A person with an ordinary knowledge about techy things should never go to Dark web because he will not be able to protect his own identity. Hackers are looking for such people who are noob. After getting into dark web they can steal your identity and use it for their work and it may be an illegal work too. And why you want to browse the dark web,there's no need. You may also get some virus in your device and your all data can be hacked in just few minutes. Difference between Deep Web and Dark Web- The deep web contains internet content you can't find through search engines, while the dark web is a hidden network that requires a special browser to access. Surface Web The portion of world wide web that is readily available to th...

 The government's nodal agency CERT-In has warned against 'Dumpster Diving', which refers to fraudsters searching through a person or an organisation's trash to obtain sensitive or valuable information for malicious activities. It suggested using a shredder to destroy documents, installing security cameras or employing security personnel and disposing electronic devices properly to avoid misuse. What is dumpster diving? Dumpster Diving is a Physical Attack in which a person recovers trash in hopes of finding sensitive information that has been merely discarded in whole rather than being run through a shredder, incinerated, or otherwise destroyed. Technique A cyber attack where the attacker gets their hands on sensitive documents or data you carelessly threw into the trash bin. Solutions to it- ·        Know why someone target dumpsters on your property. ·        Light up the waste collection area. ·  ...

  NETWORK Scanning ·        Network scanning refers to a set of procedures used for identifying hosts, ports and services in a network. ·        Network scanning is one of the components of intelligence gathering which can be used by an attacker to create a profile of the target organization. The purpose of scanning is to discover exploitable communications channel, probe as many listeners as possible, and track the ones that are responsive for an attacker’s particular needs. Types of scanning ·        Port scanning – Lists the open ports and services. ·        Network scanning – Lists the active hosts and services. ·        Vulnerability scanning – shows the presence of known weaknesses. SCANNING TOOLS ·        Nmap ·        Hping3 ·    ...

  Password Cracking It is one of the most enjoyable hacks. The password cracking may not have a burning desire to hack the password of everyone. The actual password of the user is not stored in the well-designed password-based authentication system. Due to this, the hacker can easily access to user's account on the system. Types of Password Cracking ·        Non electronic: It doesn’t require technical knowledge. §   Social Engineering §   Shoulder Surfing §   Keyboard Sniffing §   Dumpster Diving ·        Active Online: An active attack is a network exploit in which a hacker attempts to make changes to data on the target. §   Dictionary attack §   Brute-Force attack §   Rule Based attack ·        Passive Online: A network attack in which a system is monitored and sometimes scanned for open ports and vulnerabilities. ·  ...

  A keylogger, sometimes called a keystroke logger, is a type of surveillance technology used to monitor and record each keystroke on a specific computer. Consider it as a threat because… Keyloggers are often used as a spyware tool by cybercriminals to steal personally identifiable information (PII), login credentials and sensitive enterprise data. Keylogger tools for windows ·        All in One ·        Elite ·        Spytector Keylogger tools for MacOS ·        sentryPC ·        FlexiSPY ·        REFOG Keylogger Keylogger tool for Linux - Logkeys Types of keyloggers 1.    Hardware Keylogger ·        It is a physical device that is used for capturing keystrokes ·        For hardware keylogger one must hav...