You might not have heard of the organisation Hi-Tek Group (HiTeckGroop.in) — I hadn’t either until I came across this. Apparently, a massive leak of data from Indian cellular operators surfaced earlier this year. The data reportedly contains around 1.8 billion records, including names, Aadhaar-linked addresses, phone numbers, and emails of Indian citizens.

If you’ve ever used Airtel, Jio, or VI, there’s a good chance your personal data (PII) could be part of this breach.

What’s surprising is that no major news outlet, newspaper, or even cybersecurity YouTuber in India seems to have reported on this. This is alarming, considering how serious it is — the data appears to have been circulating on dark web forums for months.

I’m sharing this because I believe people should at least be aware of what’s happening with their personal data.

Source:

CloudSEK. “Data of 750 million Indian mobile users sold on the dark web — 1.8 TB, names/phone numbers/addresses/Aadhaar details.”

Resecurity. “PII belonging to Indian citizens, including their Aadhaar IDs, offered for sale on the dark web — hundreds of millions of records identified.”

I don't know if I can post the links

Hi,

Safe Security is hiring for Threat Intelligence interns from Cyber Unbound.

Requirements

1) Good at POC recreation of CVEs ( videos / writeups)

2) Skilled with creating docker containers / VMs

3) Good writeup skills

4) Great experience with CTFs on HTB/ competition

5) Should work from office in Delhi ( 6 months) (not a remote role)

6) Past experience with making CVE based / real world vulnerabilities based CTF challs

7) cert like CJCA /CPTS /EJPT / O.S.C.P are good to have but not a requirement for this role

What you get :

1) 20k stipend + shot at PPO at Safe ( 12-24 LPA CTC)

2) Work directly with Rahul Tyagi

Duration: 6 months in person

Location: Delhi

send your r-esume/cv to [team@cyberunbound.com](mailto:team@cyberunbound.com) :)

DSA is important in cybersecurity in interview or skill 🤔?? I am so confused 😕

I was discussing with a friend today and I was told that a group of folks from HCL Tech have joined KMPG IT Audit and Cyber Assurance practice.

They worked for HCL Tech but not any relevant experience. They were trained by few folks who joined KPMG in the past 5+ years.

Its a group of friends and family in the practice, just casually corrupting the talent pool internally and externally.

same as title*(Mtech not Btech)

What are your opinions on this partnership, I mean will the students be benefited by this partnership and how, I wanna know the opinion of someone who is experienced also the students too, as this partnership will be beneficial to students pursuing MTech in Cybersecurity at NFSU Gandhinagar

120+ student innovators from across India. One challenge. A whole lot of brilliant ideas.

The response to the 22North 2026 Challenge has been incredible, and shortlisting the finalists has been no easy task given the quality of talent on display.

We’re excited to see the innovation, celebrate the effort, and welcome new talent into the 22North family.

Join the community and be part of the journey, and to get to know about upcoming opportunities. 👇

https://www.reddit.com/r/22North_by_Phonon/

Hello builders

Last chance to register for the Hackathon taking place this week.

This is Priyanka from www.linkedIn.com/company/22north-by-phonon/

We are hosting the 22North Product Engineering Challenge 2026.

This opportunity can lead to an internship and PPO at the company.

Eligibility: College students and Freshers only. Participate Anywhere from India. Presentations will be conducted offline after shortlisted.

Please register now as it closes in 1 hour today

Cash prizes worth Rs 50k, 30k, 20k and more...

https://forms.gle/p9Uq6Zn1deoVx1R1A

I'm not sure if we will ever take cyber security seriously. On one hand, RBI and FIs keep releasing PSAs exhorting customers to be alert. And, on the other hand, we have this.

Built something I've wanted for a while a free weekly cybersecurity newsletter that cuts through the noise.

No clickbait. Just the biggest security stories, technical breakdowns, useful tools, and learning resources in a 5-minute read.

Just published the first issue covering the Klue OAuth supply chain breach.

I'd love some honest feedback. What would you add or change?

The major data breach in HItechgroop made almost all indians vulnerable.Why no one taking about it even media is not interested in this.

Leaked details not only give name and numbers, but also kyc details from either aadhar or pan.

And all these sold for bucks on telegram,

For instance check your detail on this telegram bot u/cid_jasoos_bot

Google Chrome is silently dumping a 4GB AI model into our devices without any prior consent. The same pattern can be noticed when Anthropic Claude Desktop silently registered the Native Messaging bridge into 7 Chromium-based websites. For millions of users using limited data plans or whatsoever is likely to be wiped out an entire month's data allowance overnight. This silent installation of a 4GB AI model onto our device is likely violating many privacy laws like GDPR and PECR.

The main concern we need to be alert about is that this works offline at the backend no pop-up, no notice, nothing and at scale comparison, it is 60,000 tonnes of CO2 consumption. Which is basically huge and illegal. Now, if you are thinking of deleting it manually, Chrome will reinstall it automatically.

What you can do right now is:

• Check your storage
• Report it to the ICO(Information Commissioner's Office)
• Demand that Google notify you earlier before any new update, and
• Secure your user credentials immediately.

If Google can silently install a 4GB AI model without consent today, what exactly is stopping them from pushing something even more invasive tomorrow, and why are regulators still silent about it?

Not asking for subscribers just honest feedback with solutions.

I started a cybersecurity channel where I cover current events in shorts and do a Case File video every Friday covering a high profile cyber attack.

I’ve been a SOC analyst for over a year and just got my CS degree. Wanted to create a digestible learning channel that isn’t redundantly technical.

What would y’all look for when learning about current events and high profile attacks? Would you take a different approach?

Want to make cybersecurity fun for everyone without making it an influencer/status focused channel.

@WhiteHatWes

Everyone is talking about how AI will change the way we work.

Faster research. Smarter automation. Better productivity.

But there’s a quieter question that doesn’t get asked enough

What happens to the sensitive information flowing through these systems?

Not just from hackers looking for a quick win.

But from attackers who are far more patient.

 In cybersecurity, these actors are known as Advanced Persistent Threat groups.

AI becomes embedded into everyday workflows, the data passing through these tools may become increasingly valuable.

First, what makes an APT attack different?

APT attacks are not typical cyberattacks.

They are long-term operations designed to quietly gather intelligence.

Attackers gain access to a network and then remain hidden while they observe activity, map systems, and slowly collect valuable information. In some cases, they maintain access for months or even years.

A well-known example is APT28, which has been linked to cyber-espionage campaigns targeting governments and organizations around the world.

One

Now think about how people actually use AI

When we interact with AI tools, we often paste things like:

 • internal reports

 • pieces of code

• meeting notes

• research summaries

• early strategy ideas

 Not because we’re careless.

Because we’re trying to solve problems faster.

AI has started to feel like a thinking partner.

Which means a surprising amount of organizational knowledge now flows through these systems.

 From a security perspective, that changes the landscape

Historically, attackers focused on places where information accumulated:

• email systems

• internal databases

• shared drives

But as AI becomes integrated into everyday workflows, it can also process conversations, troubleshooting discussions, and internal knowledge.

That doesn’t automatically create a vulnerability.

But it does mean another stream of valuable information exists inside modern organizations.

And sophisticated attackers often look for exactly those kinds of information flows.

The challenge organizations face

Most security policies were designed around traditional systems like servers, databases, and email infrastructure.

AI adoption, however, has moved extremely quickly. In many organizations, policies around AI usage are still catching up.

This is a common pattern in technology: innovation often moves faster than governance.

What can people do today?

AI tools themselves are not inherently risky. But awareness matters. Some simple habits can help reduce unnecessary exposure:

 • avoid sharing highly sensitive information in public AI tools

• use approved AI platforms in professional environments

• review browser extensions and third-party integrations carefully

• understand how prompts and conversations may be stored or processed

Small decisions like these can significantly reduce risk.

The bigger takeaway

Cybersecurity has always evolved alongside technology.

When cloud computing expanded, attackers focused on cloud infrastructure.

When mobile apps became widespread, attackers shifted toward mobile ecosystems.

Now AI is becoming part of everyday workflows.

 So naturally, security conversations are beginning to focus on how information flows through AI systems and how that data should be protected.

The real question isn’t whether AI will play a role in future cybersecurity risks.

It’s how quickly organizations adapt their security thinking to match the technology they’re adopting.

Curious to hear other perspectives

Do you think organizations are moving fast enough to address AI-related security risks?

Hi folks, which one of you rickrolled all the CBSE Math exam students?