Editor-in-Chief

Priya Raman

Priya has covered enterprise security for over a decade, with a focus on vulnerability disclosure, incident response and the gap between vendor advisories and what defenders can actually action.

130 articlesUpdated 23 Oct 2026

Vulnerability disclosureIncident responseSecurity leadershipLinkedIn

Articles by Priya Raman

GuidesBanking & Fintech
RBI IT Governance & Cybersecurity Master Direction for NBFCs: Implementation Playbook
A comprehensive implementation guide for NBFCs navigating RBI Master Directions on IT governance, 6-hour incident disclosure, vendor audits, and VAPT.
Priya Raman23 Oct 202614 min read
ResearchCloud & SaaS
OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection
A critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.
Priya Raman23 Oct 202612 min read
ResearchBanking & Fintech
Singapore CSA Mandates Quantum-Safe Cryptographic Migration Roadmap for Critical Information Infrastructure
Singapore's Cyber Security Agency releases the National Quantum-Safe Migration Roadmap at SICW, setting strict 2031-2035 deadlines for Critical Infrastructure operators.
Priya Raman21 Oct 202614 min read
ThreatsCloud & SaaSHigh
libcurl HTTP/2 Streaming Upload Use-After-Free Flaw Exposes Client Applications to Memory Corruption
A heap use-after-free defect in libcurl's HTTP/2 streaming upload engine enabled memory corruption when paused streams were aborted or reset.
Priya Raman18 Oct 202615 min read
ResearchCloud & SaaS
Claude Solves 25-Year NIST Elliptic Curve Mystery, Debunking NSA Backdoor Theories
Anthropic's Claude reconstructed the 1997 Unix timestamps behind NIST ECDSA curve seeds, proving standard curves were randomly generated without an NSA backdoor.
Priya Raman18 Oct 202612 min read
ThreatsCloud & SaaSCritical
Autonomous AI Agents Infiltrate Live Production Systems in Escalating Exploitation Wave Across Indian Enterprises
CERT-In advisory CIAD-2026-0049 reveals autonomous AI agents infiltrated live systems, reading confidential data as threat actors weaponize agentic tooling.
Priya Raman16 Oct 202610 min read
InsightsBanking & Fintech
RBI Cyber Security Framework Mandates 6-Hour Breach Reporting and Cloud Audits
The Reserve Bank of India enforces updated CSFB directives mandating 6-hour breach disclosure to CERT-In, third-party cloud audits, and zero-trust banking security.
Priya Raman15 Oct 20269 min read
ThreatsCloud & SaaSCritical
JTL-Connector for WooCommerce Unrestricted File Upload Flaw CVE-2026-87855 Patched
JTL patches a critical arbitrary file upload vulnerability in JTL-Connector for WooCommerce (CVE-2026-87855) allowing unauthenticated web shell execution.
Priya Raman14 Oct 20268 min read
ThreatsCloud & SaaSHigh
SimpleForm WordPress Plugin Flaw Lets Visitors Register as Admin
WordPress security advisory resolves a high-severity privilege escalation flaw in SimpleForm (CVE-2026-104748) allowing unauthenticated users to register as admin.
Priya Raman14 Oct 20268 min read
ThreatsCloud & SaaSCritical
Abandoned Cart Pro for WooCommerce Insecure Deserialization Flaw CVE-2026-97657 Patched
Tyche Softwares resolves a critical PHP object injection flaw in Abandoned Cart Pro for WooCommerce (CVE-2026-97657) enabling unauthenticated remote code execution.
Priya Raman14 Oct 20268 min read
ThreatsCloud & SaaSHigh
Google Cloud Run & Artifact Registry Privilege Escalation Flaw CVE-2026-79696 Patched
Google Cloud resolves a high-severity privilege escalation flaw in Cloud Run and Artifact Registry auth helpers (CVE-2026-79696) exposing service account tokens.
Priya Raman14 Oct 20268 min read
NewsCloud & SaaSHigh
Google Cloud Armor Flaw Allowed WAF Bypass via HTTP/3 Stream Desynchronization
Google patches a high-severity desynchronization flaw in Cloud Armor edge proxies that allowed attackers to smuggle malicious HTTP/3 payloads past WAF rules.
Priya Raman13 Oct 20268 min read
Cyber AttackGov & Defence
Defense Aerospace Contractor Discloses Nation-State Intrusion in Satellite Ground Station Software
A premier defense aerospace corporation files SEC Form 8-K Item 1.05 after nation-state actors infiltrate satellite ground station command software.
Priya Raman13 Oct 20268 min read
NewsBanking & Fintech
EU DORA Enforces Mandatory Oversight Framework and Direct Regulatory Audits for Critical Cloud Providers (CTPPs)
European Supervisory Authorities designate Critical ICT Third-Party Providers under DORA, granting regulators direct inspection powers over major cloud hyperscalers.
Priya Raman13 Oct 20268 min read
Cyber AttackCloud & SaaS
EDA Software Firm Discloses Nation-State Exfiltration of 2nm Chip Architecture IP
A major semiconductor EDA software firm files SEC Form 8-K Item 1.05 after nation-state threat actors exfiltrate next-gen 2nm chip design libraries.
Priya Raman12 Oct 20268 min read
NewsCloud & SaaS
India DPDP Rules 2026: Government Mandates Strict Cross-Border Data Transfer Controls and Independent Algorithmic Audits
India notifies updated DPDP Rules 2026 mandating Significant Data Fiduciaries implement cross-border transfer whitelists and third-party algorithmic audits.
Priya Raman12 Oct 20268 min read
Cyber AttackCloud & SaaS
Global Telecom Discloses Nation-State Infiltration of Subsea Cable Management Systems
A global telecommunications consortium files SEC Form 8-K Item 1.05 after nation-state threat actors infiltrate subsea fiber cable network management platforms.
Priya Raman12 Oct 20268 min read
NewsBanking & Fintech
Reserve Bank of India Issues Directives on Multi-Cloud Concentration Risk and Mandatory Immutable Air-Gapped Vaults
The Reserve Bank of India mandates regulated banking entities deploy multi-cloud architecture and air-gapped cryptographic vaults to prevent concentration risk.
Priya Raman12 Oct 20268 min read
Cyber AttackCloud & SaaS
Electric Vehicle Maker Discloses Unauthorized Access to Global Fleet Telematics Platform
A major electric vehicle manufacturer files SEC Form 8-K Item 1.05 after threat actors breach cloud telematics, accessing vehicle GPS coordinates and remote commands.
Priya Raman12 Oct 20268 min read
InsightsBanking & Fintech
RBI Mandates Annual Cyber Crisis Tabletop Simulations and Continuous Multi-Region Cloud Failover Verification for Banks
Reserve Bank of India issues binding directions requiring all regulated banks to execute annual live cyber crisis simulations and automated multi-region cloud failover.
Priya Raman12 Oct 20268 min read
Cyber AttackIndustrial & OT
Container Port Operator Discloses Intrusion in Automated Terminal Operating System
A multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Priya Raman11 Oct 20268 min read
InsightsBanking & Fintech
EU DORA Regulatory Technical Standards Enforce Mandatory Threat-Led Penetration Testing (TLPT) for Critical Financial Entities
European Supervisory Authorities notify binding DORA technical standards requiring mandatory Threat-Led Penetration Testing (TLPT) and strict third-party ICT audits.
Priya Raman11 Oct 20268 min read
Cyber AttackCloud & SaaS
Semiconductor Foundry Discloses Exfiltration of EUV Lithography Mask Designs
A premier semiconductor foundry submits SEC Form 8-K Item 1.05 after nation-state actors compromise CAD vaults and exfiltrate sub-2nm EUV lithography mask IP.
Priya Raman11 Oct 20268 min read
InsightsBanking & Fintech
RBI Requires Automated HSM Key Rotation and Token Decryption Audits for Payments
Reserve Bank of India issues binding directions requiring automated HSM cryptographic key rotation and token decryption logging across all payment systems.
Priya Raman11 Oct 20268 min read