Cyber Security Research Blogs

NPCI UPI Cyber Security For Banks (OC-215A) represent a pivotal update to secure India’s booming digital payments ecosystem, processing over 15 billion transactions monthly. Released onContinue readingNPCI UPI API Security Guidelines 2025: A Comprehensive Compliance Guide for Banks, Fintechs, and TPAPs

This second Part covers the remaining critical API vulnerabilities from the OWASP API Security Top 10 (2023), focusing on Server-Side Request Forgery (SSRF), Security Misconfiguration,Continue readingPart 2: API Attacks – Completing the OWASP API Security Top 10

APIs power modern applications, enabling seamless data exchange between services, but they also introduce significant security risks. The OWASP API Security Top 10 for 2023Continue readingAPI Attacks: Understanding the OWASP API Security Top 10 (Part- 1)

API testing methodologies provide structured approaches to identify vulnerabilities in application programming interfaces, essential for modern web and mobile applications. These methods combine manual expertiseContinue readingComprehensive Guide to API Testing Methodologies in Cybersecurity

India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the European Union’s General Data Protection Regulation (GDPR) both aim to safeguard personal data amidContinue readingIndia’s DPDP Act vs. EU’s GDPR: A Comprehensive Comparison

Vulnerable Version pgAdmin 4 versions prior to 9.11​ Fixed Version pgAdmin 4 v9.11 Base Score 9.1 Critical Vendor Discription:- pgAdmin is a widely used open-sourceContinue readingCVE-2025-13780 – Database Restore Tool Command Injection in pgAdmin

The Digital Personal Data Protection Act, 2023 (DPDP Act) establishes a robust framework for penalizing non-compliance with personal data handling obligations in India. This blogContinue readingPenalties and Enforcement under the Digital Personal Data Protection Act, 2023

The Reserve Bank of India (RBI) has emphasized the adoption of Zero Trust Architecture (ZTA) for banks and financial institutions to combat rising cyber threats,Continue readingRBI’s Directive on Zero Trust Architecture

Vulnerable Version 3.0.0-RC1 ≤ Craft CMS < 3.9.154.0.0-RC1 ≤ Craft CMS < 4.14.155.0.0-RC1 ≤ Craft CMS < 5.6.17 Fixed Version Craft CMS 3.9.15Craft CMS 4.14.15CraftContinue readingCraftCMS Yii Class Injection RCE – CVE-2025-32432

Vulnerable Version version 2.7-2 Fixed Version update latest version Base Score 9.8 critical Vendor Description: – GNU InetUtils is a collection of standard network utilitiesContinue readingCVE-2026-24061 – GNU InetUtils telnetd Argument Injection Authentication Bypass