India
Tech news from India, in English
100 stories this week from 2 outlets in India.
-
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small…
-
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP…
-
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation scams…
-
Anthropic files for IPO even as losses surge to $80B
Anthropic, one of the leading artificial intelligence (AI) companies and the developer of the large language model Claude, has filed for an initial public offering (IPO), moving closer to becoming a publicly listed company. The company…
-
Matiks raises $10M in pre-Series A round led by General Catalyst
Bengaluru-based social gaming platform Matiks has raised $10 million in a pre-Series A funding round led by General Catalyst. The round also saw participation from entrepreneur Ronnie Screwvala and existing investors Info Edge Ventures…
-
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in…
-
MakeMyTrip rebounds in Q2 FY27 with $1.8M profit
Digital travel booking platform MakeMyTrip swung back into profit for the three months ending September, 2026 boosted by increased booking across all categories. The company reported a net profit of $1.8 million for the second quarter of…
-
Build, scale, and govern AI agents: Inside Google Cloud’s Gemini roadmap
Lean teams rarely lack ambition. What they lack is the headcount to turn it into production-ready AI, from the engineers who build agents to the security staff who keep them in check. That is the gap Google Cloud’s next webinar, in…
-
5 Lessons to Learn from So Late in the Day by Claire Keegan
So Late in the Day by Claire Keegan is a short but thought-provoking work of literary fiction that explores relationships, regret, gender expectations, and the quiet ways people reveal their true character. The story follows Cathal, a man…
-
Tata Comm to invest $450M in high-speed fibre network to connect AI data centres
Tata Communications on Monday said it plans to invest $450 million (about Rs 4,280 crore) for setting up a high-speed long-haul fibre network in India to connect AI data centres. The first phase of the programme will focus on the…
-
Meta Business Agent aims to turn WhatsApp into a 24/7 storefront for D2C brands
A customer browsing a brand’s Instagram page late at night may have questions about a product, need help choosing the right option or want to know when an order will arrive. If the business cannot respond immediately, that moment of…
-
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first…
-
5 Lessons to Learn from Why Does He Do That? by Lundy Bancroft
Why does someone who claims to love you also make you feel afraid, guilty, or unworthy? In Why Does He Do That? Inside the Minds of Angry and Controlling Men , author Lundy Bancroft explores the behaviour of abusive and controlling men…
-
Healthtech startup BioStack raises $9.5M in seed funding round led by Peak XV, others
Healthcare technology company BioStack has raised $9.5 million in a seed funding round led by Peak XV, Afore Capital, DCVC, Emerson Collective, SV Angel, Verdict Capital, Streamlined Ventures, and Y Combinator. The round will support…
-
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one…
-
Ather Energy swings to Rs 1.26 Cr profit in Q2
Electric two-wheeler maker Ather Energy reported a consolidated net profit of Rs 1.26 crore in the second quarter of FY27, reversing a net loss of Rs 154 crore in the year-ago quarter. Revenue from operations rose 63% year-on-year (YoY) to…
-
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread…
-
How Attero is using AI to solve recycling’s pricing and compliance challenges
A washing machine arriving at a recycling plant may look like a single product. For a recycler, however, its value depends on what is inside, which components are missing, how much material can be recovered, and what it will cost to…
-
Told to give up science in school, Mallikarjuna Iytha now backs 2,000 entrepreneurs with disabilities
Living with 88% locomotor disability, the National Award-winning founder of IDEA has spent seven years making one argument: persons with disabilities should be treated as entrepreneurs and job creators, not welfare recipients. Mallikarjuna…
-
Same AI, different outcomes: what 25 lean AI startups got right
Every AI startup today starts from the same place. The same frontier models, the same open-source alternatives, the same rented GPUs. A two-person team in Bengaluru and a thousand-person incumbent buy them on nearly the same terms. So why…
-
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79…
-
Collective Artists Network’s Vijay Subramaniam on AI and the changing media landscape
For years, the media industry has operated in silos. Talent agencies managed stars, studios made films, platforms distributed content, and brands paid to reach audiences. Today, those boundaries are blurring. Creators are building their…
-
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private…
-
Soulflower's Natasha Tuli on why brands must earn customer trust
Advertising and discounts can attract customers, but getting them to return takes more than marketing. At TechSparks 2026 in Bengaluru, Natasha Tuli, Founder, CEO and Chief Formulator of Soulflower, spoke about the importance of building…
-
Startup news and updates: daily roundup (October 26, 2026)
YourStory presents the daily news roundup from the Indian startup ecosystem and beyond. Here's the roundup for Monday, October 26, 2026. Latest News Electric two-wheeler maker Ather Energy reported a consolidated net profit of Rs 1.26…
-
India's voice AI challenges could shape global technology, says Murf AI co-founder
What Indian users consider an ordinary conversation could be the toughest test for voice AI, and solving it could unlock applications worldwide. An AI voice can answer a question, confirm an order or help book a reservation. But can it…
-
QpiAI founder Nagendra Nagaraja makes the case for intelligence modelling
Nagendra Nagaraja, founder, CEO, and chairman of QpiAI, believes that artificial intelligence is fundamentally misunderstood. “I don’t want to use the word AI, I want to use the word intelligence modelling,” Nagaraja said during his…
-
Life After 55: Cradle Of Life is reimagining senior living lifestyle for retired Indians
Senior living is evolving beyond simply providing safe, comfortable homes. For Sharad Gadsing, Founder, Cradle Of Life , the opportunity lies in rethinking what life after 55 can look like from thoughtfully designed homes and active…
-
Who will shape India’s next 500 million digital users?
The next wave of India’s digital economy raises a different set of questions: who controls the layers through which consumers discover apps, access services and make payments? And how can India build for the next 500 million users without…
-
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the…
-
Rapido rides ahead with Razorpay’s real‑time payments
Getting around an Indian city has always been harder than it should be. Cabs were expensive, public transport was overcrowded, and for millions of daily commuters, the last mile remained unsolved. When Aravind Sanka, Pavan Guntupalli, and…
-
Startup funding falls below $100M; Deeptech startups look to go global
Dear Reader, The AI boom is fuelling a datacentre expansion, but local communities are pushing back. In the UK, residents are raising concerns about noise, pollution, and blocked sunlight, putting the spotlight on the environmental costs…
-
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to…
-
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. "What researchers saw was an…
-
PM inaugurates RBI's Rs 169-cr data centre, Cybersecurity Training Institute in Odisha
Prime Minister Narendra Modi inaugurated the Reserve Bank of India's Rs 169-crore data centre and Cybersecurity Training Institute in Bhubaneswar on Sunday, officials said. Union Finance Minister Nirmala Sitharaman, RBI Governor Sanjay…
-
Will take action if Kannadigas sidelined in jobs in Karnataka: CM Shivakumar
Karnataka Chief Minister DK Shivakumar said on Sunday that the state government would take appropriate action if private institutions were found deliberately sidelining Kannadigas in job opportunities. In a post on 'X', Shivakumar said the…
-
Gen Z is shaping India’s beauty market: prevention first,and going beyond the metros
Gen Z is changing how India shops for beauty. For this generation, beauty is part of how they show up every day. They protect their skin before fixing it and try premium brands through minis, and they are taking beauty well beyond the…
-
Five IPOs to open next week; companies eye close to Rs 2,600 Cr
Five companies, including EAAA India Alternatives, SFC Environmental Technologies, and M K Sons Fine Jewels, are set to launch their initial public offerings (IPOs) next week, aiming to raise nearly Rs 2,600 crore in the primary market…
-
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment…
-
What will it take for India’s fintech infrastructure to go global?
India’s payments ecosystem has shown that financial infrastructure can operate at enormous scale. But as fintech companies expand into cross-border business payments and adopt AI, they face a different set of challenges. At TechSparks…
-
Beyond transactions: How PhonePe and Razorpay are using AI to improve digital payments
India has made digital payments as simple as scanning a QR code. The next opportunity lies in using payments to connect consumers with relevant financial products and help businesses address the challenges of growing online. At TechSparks…
-
Art and design: how this award-winning Bengaluru airport elevates passenger experience
Launched in 2014, PhotoSparks is a weekly feature from YourStory, with photographs that celebrate the spirit of creativity and innovation. In the earlier 1,020 posts, we featured an art festival, <a…
-
Workflow, ecosystems, AI: Test your business creativity with Edition 255 of our weekly quiz!
Lateral Sparks, the weekly quiz from YourStory, tests your domain knowledge, business acumen, and lateral thinking skills (see the previous edition here ). In this 255th edition of the quiz, we present issues tackled by real-life…
-
Discover how Superminis, Nayam by Lakshita and Broadstar are scaling nationally with Myntra’s platform capabilities
Myntra’s Big Fashion Festival (BFF) gives brands an opportunity to reach shoppers across India. This year, the event features 21,000 emerging brands and labels, including 13,000 participating for the first time, and more than eight million…
-
Ultraviolette’s answer to the global chip squeeze; The making of Indian flying taxis
Dear Reader, Union Minister Piyush Goyal said that the commerce ministry is identifying " AI-proof " professions where artificial intelligence enhances efficiency rather than replaces workers. Addressing Indian researchers and students in…
-
Comm min identifying AI-proof professions, sectors where India can take global lead: Goyal
The commerce ministry is identifying professions less vulnerable to artificial intelligence (AI) to prepare for a fast-changing technological landscape and seize opportunities for India to emerge as a global leader, Union Minister Piyush…
-
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27…
-
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google…
-
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the…
-
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, Microsoft's .NET, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli…
-
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV)…
-
How art festivals benefit when galleries across cities collaborate
Launched in 2014, PhotoSparks is a weekly feature from YourStory, with photographs that celebrate the spirit of creativity and innovation. In the earlier 1,020 posts, we featured an art festival, <a…
-
Why India’s flying taxi revolution begins with electric air ambulances
For most deeptech entrepreneurs, the hardest lesson is not solving complex physics but overcoming their own technical fascination. Professor Satya Chakravarthy, Founder and technical lead of The ePlane Company, explained this clearly at…
-
Rs 10,000 Cr into restaurants. But why do 80% fail? Here's the Hotshare F&B investment playbook
India's restaurant industry is attracting serious capital, but building a profitable restaurant remains one of the most difficult businesses to crack. According to Lavanya Jayashankar, Founder and CEO of Hotshare, an F&B investment…
-
Infosys AI revenue jumps 29%; Apple’s foldable iPhone fully pre-booked in week 1
Dear Reader, Cybercriminals wasted little time turning a software disclosure into an opportunity. Cloudflare detected millions of attempts to exploit vulnerabilities in PHP soon after they were made public, underscoring how quickly…
-
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and…
-
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found…
-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain…
-
[Weekly funding roundup Oct 17-23] VC funding falls below $100M amid lack of big deals
Venture capital funding for Indian startups saw a steep decline in the third week of October, primarily due to a lower number of deals and the absence of any large-value transactions. Venture capital funding during the week stood at just…
-
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this investigation also…
-
As chip prices surge, EV maker Ultraviolette is working on ways to absorb costs
The global shortage of memory chips has driven up costs, placing a huge strain on electric vehicle makers in the country. Bengaluru-based Ultraviolette—which produces high-performance electric motorcycles—says it will not pass on the high…
-
5 Lessons to learn from Nexus by Yuval Noah Harari
Information has always shaped human civilisation. From ancient stories and religious texts to newspapers, television and social media, the way people share information influences what they believe, how they make decisions and whom they…
-
Deeptech startups in India must have global ambitions, concur panellists at TechSparks
The deeptech sector in the Indian startup ecosystem has emerged out of the shadows and carved a niche for itself. Many aspects are falling in place for the growth of deeptech startups, and despite various challenges companies from India…
-
5 Lessons from Prithvi Raj Banerjee’s Mindful Thinking
Anxiety, distraction and overthinking can make everyday life feel overwhelming. In Mindful Thinking: Simple Ways to Let Go of Your Anxiety, Boost Your Productivity and Rewire Your Thoughts , technologist and mindfulness coach Prithvi Raj…
-
Experts discuss how AI can bridge gaps in India’s public healthcare system
From remote monitoring and early disease detection to tools that help frontline health workers make better decisions, startups are developing solutions to address gaps in healthcare delivery. The bigger challenge, however, lies in…
-
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an…
-
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth…
-
Startup news and updates: Daily roundup (October 23, 2026)
YourStory brings you today’s headlines with the latest developments across sectors. Funding news GVFL leads Rs 3.7 Cr seed funding round in SpectraGaze Systems GVFL has led a Rs 3.7 crore seed round in Ahmedabad-based SpectraGaze Systems…
-
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which…
-
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no…
-
Autonomy and control are not opposites, they go together: EY GDS at DevSparks Chennai
Ask a room of developers about agents today and you will get plenty of answers. Almost everyone has built one, and most have a demo they are proud of. The harder question is what happens after that, when the agent has to hold up against…
-
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image…
-
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be…
-
Building a New Foundation for Education: Anshu Kumar’s Neev Ki Eent Foundation for Children of Bihar’s Brick Kiln Workers
Every year, thousands of families in Bihar move from one place to another in search of employment. A significant number of these families work at brick kilns. For them, migration is not simply about changing locations. It means changing…
-
Sebi cautions investors against fraudulent stock-tip WhatsApp groups
Markets regulator Sebi has cautioned investors against fraudulent WhatsApp stock-tip groups that use 'astroturfing'–fake endorsements and profit claims–to create a false impression of credibility and lure investors. In a statement, Sebi…
-
Tonbo Imaging shares make stellar market debut; jump 66%
Shares of Tonbo Imaging India, a defence electronics maker, on Friday listed with a premium of 66% against the issue price of Rs 700. The stock made its debut at Rs 1,162 apiece, registering a premium of 66% from the issue price on the…
-
How AI Is democratising creativity, according to Canva India’s Chandrika Deb
As AI-generated creators and near-identical AI visuals flood social feeds, the question of what is left for humans to do has become hard to avoid. At TechSparks 2026 , Chandrika Deb, Country Manager, India, Canva, offered a clear answer…
-
Apple iPhone Duo's entire first week stock pre-booked in India
Apple is learnt to have exhausted the first week’s stock of its most expensive iPhone, the iPhone Duo, which is scheduled to go on sale in India on October 23, sources aware of the development said. Apple Stores in BKC (Bandra Kurla…
-
Swiggy’s Q2: Net loss drops nearly 16%, revenue rises 36%; What sells? The celebrity or the product?
Dear Reader, Shiprocket expands into the food commerce market. The company’s AI-native commerce platform fastrr has partnered with Vegorama Group, which operates Punjabi Angithi, and Bikkgane Biryani, to help the restaurant brands manage…
-
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log…
-
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its…
-
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's…
-
eMudhra to exit global website security certificate business
Bengaluru-based digital trust company eMudhra has decided to exit its global SSL/TLS certificate business following a security incident involving weak cryptographic keys that prompted action from Google and Mozilla. In a regulatory filing…
-
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them…
-
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company's Cambridge Analytica data scandal, which came to light in 2018. According…
-
Swiggy's net loss drops nearly 16% to Rs 922 Cr in Q2, revenue rises 36%
Food and grocery delivery platform Swiggy narrowed its net loss by 15.6% year on year (YoY) in the second quarter of FY27. Its revenue rose 36% during the same period. The company reported a loss of Rs 922 crore in Q2 of FY27, compared…
-
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries…
-
5 Books you must read to learn how to say no confidently
Saying no can be surprisingly difficult, especially when you worry about disappointing others, damaging relationships or being perceived as selfish. Whether it is agreeing to extra work, accepting social invitations you would rather…
-
TravClan raises $5M from Flipkart, others
TravClan, a traveltech startup, has raised $5 million in funding from Flipkart and August One, along with debt financing from Trifecta Capital. The startup said it will use the funds to expand its global supply network, enhance its…
-
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns…
-
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have…
-
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside…
-
Startup news and updates: daily roundup (October22, 2026)
YourStory brings you today’s headlines with the latest developments across sectors. Featured stories Meet the ‘Flower Lady of Manipur’ Chokhone Krichena, founder of Manipur-based social enterprise Dianthe, is helping over 300 women farmers…
-
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release…
-
Shiprocket’s fastrr taps food commerce with new restaurant partnerships
Shiprocket’s AI-native commerce platform, fastrr, has entered the food commerce segment through partnerships with Vegorama Group, which operates Punjabi Angithi, and Bikkgane Biryani. The partnerships come as restaurant brands explore ways…
-
Can AI make debt collections less about chasing and more about predicting?
Defaults are inevitable. For the past few years, we have been hearing about predictive analytics that can identify a borrower who is going to default before the default actually happens. Time and again, we have seen the limits of this…
-
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow…
-
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in…
-
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities dating back to October 17, 2026, against its MadPot honeypot service, as the flaws come under broad…
-
Chapter Home raises Rs 63 Cr in a mix of equity and debt
Chapter Home, a home and kitchen consumer brand, has raised Rs 63 crore through a mix of equity and debt at a valuation of nearly Rs 1,000 crore. The funding round saw participation from Bessemer Venture Partners, Stride Ventures…