Topic

CERT-In: news, advisories and analysis

20 articlesUpdated 23 Oct 2026

CyberSecureToday covers CERT-In across 20 articles published between 11 Sep 2026 and 23 Oct 2026. The coverage includes 2 vulnerability advisories and 14 analysis or guidance pieces. 2 advisories are rated critical or high severity.

Stories on CERT-In most often intersect with RBI, Reserve Bank of India and Compliance, with Banking, Financial Services & Fintech the most affected sector. The most recent story, “RBI IT Governance & Cybersecurity Master Direction for NBFCs: Implementation Playbook”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

GuidesBanking & Fintech
RBI IT Governance & Cybersecurity Master Direction for NBFCs: Implementation Playbook
A comprehensive implementation guide for NBFCs navigating RBI Master Directions on IT governance, 6-hour incident disclosure, vendor audits, and VAPT.
Priya Raman23 Oct 202614 min read
ThreatsCloud & SaaSCritical
Autonomous AI Agents Infiltrate Live Production Systems in Escalating Exploitation Wave Across Indian Enterprises
CERT-In advisory CIAD-2026-0049 reveals autonomous AI agents infiltrated live systems, reading confidential data as threat actors weaponize agentic tooling.
Priya Raman16 Oct 202610 min read
InsightsBanking & Fintech
RBI Cyber Security Framework Mandates 6-Hour Breach Reporting and Cloud Audits
The Reserve Bank of India enforces updated CSFB directives mandating 6-hour breach disclosure to CERT-In, third-party cloud audits, and zero-trust banking security.
Priya Raman15 Oct 20269 min read
NewsBanking & Fintech
Reserve Bank of India Issues Directives on Multi-Cloud Concentration Risk and Mandatory Immutable Air-Gapped Vaults
The Reserve Bank of India mandates regulated banking entities deploy multi-cloud architecture and air-gapped cryptographic vaults to prevent concentration risk.
Priya Raman12 Oct 20268 min read
InsightsBanking & Fintech
CERT-In Presses Indian Banks on Cloud Concentration Risk and Immutable Backups
CERT-In security advisory mandates multi-cloud redundancy, immutable backup vaults, and 6-hour incident disclosure across Indian financial institutions.
Priya Raman7 Oct 20268 min read
InsightsBanking & Fintech
The Multi-Clock Compliance Trap: Navigating Conflicting 6-Hour, 24-Hour, and SEC 8-K Incident Deadlines
Disparate incident reporting windows across the SEC, EU DORA, and India's RBI create a legal hazard for CISOs. Here is how enterprise response playbooks must adapt.
Tom Verhoeven6 Oct 20268 min read
InsightsBanking & Fintech
RBI Enforces Stricter Cyber Governance and 6-Hour Incident Disclosure for Regulated Financial Entities
Reserve Bank of India mandates strict IT governance, cloud outsourcing oversight, and 6-hour cyber incident disclosures across financial institutions.
Priya Raman6 Oct 20268 min read
NewsBanking & Fintech
RBI Enforces Stricter Cyber Resilience Governance and Mandatory Six-Hour Incident Reporting via DAKSH
The Reserve Bank of India mandates strict 6-hour incident disclosure via DAKSH and CERT-In, requiring board-level oversight and 180-day forensic log retention.
Tom Verhoeven5 Oct 20268 min read
GuidesBanking & Fintech
CERT-In and RBI Enforce Unified 6-Hour Cybersecurity Breach Reporting Playbook for Critical Sectors
A technical compliance guide for Indian enterprises implementing automated SIEM/SOAR playbooks to meet CERT-In and RBI 6-hour mandatory breach disclosure deadlines.
Aisha Noor28 Sep 202610 min read
InsightsBanking & Fintech
RBI Mandates Baseline Cyber Resilience and 6-Hour Incident Reporting for Digital Payment System Operators
The Reserve Bank of India has operationalized mandatory cyber resilience controls, board-level oversight, and 6-hour breach reporting for digital payment operators.
Tom Verhoeven27 Sep 20269 min read
InsightsBanking & Fintech
RBI Outsourcing Rules Mandate Multi-Cloud Exit Plans, 6-Hour Incident Notification
The Reserve Bank of India enforces comprehensive IT outsourcing directives, mandating multi-cloud exit plans, 6-hour incident disclosure, and strict concentration risk controls.
Mei-Lin Chen26 Sep 202618 min read
InsightsBanking & Fintech
RBI Enforces 6-Hour Breach Notification and Cloud Outsourcing Audits Across Financial Sector
RBI accelerates enforcement of its IT Governance Master Direction, mandating 6-hour incident reporting and strict third-party cloud outsourcing audits for financial entities.
Tom Verhoeven24 Sep 202618 min read
InsightsBanking & Fintech
RBI Issues Consolidated 2026 Cybersecurity and Technology Resilience Directions for Commercial Banks
The Reserve Bank of India overhauls bank cyber regulations with the 2026 Directions, mandating Board-level accountability, assurance audits, and 6-hour reporting.
Priya Raman23 Sep 202616 min read
InsightsBanking & Fintech
India Operationalizes DPDP Enforcement Rules Mandating Significant Data Fiduciary Audits and ₹250 Crore Breach Penalties
India operationalizes DPDP Rules 2026, establishing Data Protection Board inquiries, mandatory resident DPOs, independent audits, and ₹250 Crore breach fines.
Daniel Okafor23 Sep 202616 min read
InsightsBanking & Fintech
RBI Enforces Stricter Cyber Resilience & 6-Hour Breach Reporting for Banks and Regulated Financial Entities
The Reserve Bank of India mandates accelerated 6-hour incident disclosures, board-level oversight, and strict third-party cloud risk controls across banks and financial institutions.
Priya Raman22 Sep 202617 min read
ThreatsCloud & SaaSCritical
Check Point Security Management Buffer Overflow Flaw Enables Unauthenticated Remote Root Code Execution
Check Point and CERT-In issue emergency alerts for critical CVSS 9.8 flaw CVE-2026-91843 in Security Management and Log Servers allowing remote unauthenticated root compromise.
Mei-Lin Chen20 Sep 202614 min read
InsightsBanking & Fintech
RBI Tightens Cyber Resilience Framework With 6-Hour Incident Reporting Rule
The Reserve Bank of India mandates accelerated 6-hour incident reporting, continuous board-level oversight, and strict third-party cloud outsourcing audits.
Priya Raman15 Sep 20269 min read
NewsBanking & Fintech
CERT-In Warns of Massive Android Smishing Campaign Masquerading as Traffic E-Challans
CERT-In issued advisory CIAD-2026-0038 warning against an aggressive smishing blitz delivering trojanized APKs disguised as official Parivahan traffic e-challan notices.
Mei-Lin Chen14 Sep 20267 min read
GuidesGov & Defence
CERT-In's six-hour clock meets DPDP: one intake process, two notification deadlines
India's six-hour CERT-In reporting clock has run since June 2022. From May 2027 a second DPDP clock starts on the same incident. Build one intake process now.
Tom Verhoeven11 Sep 20266 min read
NewsGov & Defence
A CVSS 10.0 ERP Flaw Your Scanner Will Never Report: The CERT-In Blind Spot
CERT-In scored an unauthenticated RCE in Manacle ERP at CVSS 10.0. The CVE is in NVD, but with no CPE data your scanner cannot match it. Here is how to fix that.
CST Editorial Desk11 Sep 20266 min read