A researcher named Robin Justin detailed how he exploited vulnerabilities in India’s Sarathi Parivahan website, accessing the personal identifiable information (PII) of 185 million citizens. He found several insecure endpoints that allowed him to access names, addresses, and driving license numbers. After reporting these vulnerabilities to India’s Computer Emergency Response Team (CERT-IN), he also discovered a weak one-time password (OTP) system for an administrator account. Both issues have been resolved.

Cybersecurity Companies’ Stocks Fall Sharply as Anthropic Releases Claude Security Tool
Shares of major cybersecurity companies nosedived on Friday after AI startup Anthropic unveiled Claude Code Security, a new AI-powered tool capable of autonomously scanning codebases