VulnHub

Real-time Cybersecurity News

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

The Hacker News

Overview

Starting November 1, 2026, the Indian government will require telecom service providers to display the registered names of callers along with their phone numbers for incoming calls. This new regulation aims to help users identify unknown numbers and reduce the volume of spam and fraudulent calls. The Department of Telecommunications issued a circular to enforce this change, indicating a proactive approach to enhance caller transparency. By making it easier for individuals to recognize who is calling, the government hopes to protect citizens from potential scams and unwanted solicitations. This initiative is part of a broader effort to improve telecommunications security and user experience in India.

Key Takeaways

  • Affected Systems: Telecom networks in India
  • Timeline: Disclosed on October 2023

Original Article Summary

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent calls. To that end, the Department of Telecommunications has issued a circular urging service

Impact

Telecom networks in India

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Disclosed on October 2023

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

The Hacker News

NGINX has released updates to address five vulnerabilities, including a significant flaw that has persisted since May 2005. Among these are three memory-related issues that could crash a worker process or potentially allow an attacker to execute arbitrary code, contingent on specific configurations. Additionally, one vulnerability could enable attackers to forge a TLS session, bypassing client certificate checks. These vulnerabilities affect all versions of NGINX since the identified flaw's introduction, making it crucial for users to update promptly. The release of versions 1.30.6 and 1.31.7 on October 14 is a direct response to these security risks, emphasizing the need for users to maintain up-to-date software to protect against exploitation.

Oct 15, 2026

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

The Hacker News

Next.js has rolled out an urgent security patch that addresses two serious vulnerabilities allowing unauthenticated remote code execution (RCE) and a high-severity denial-of-service (DoS) issue. The first RCE flaw is linked to React Server Components, while the second involves librsvg, an open-source library used by Next.js for processing SVG images through the sharp package. This update, released on October 14, is crucial for developers using Next.js, as it can prevent attackers from executing malicious code on affected systems. Users should apply this patch promptly to protect their applications from potential exploitation. The vulnerabilities could have serious implications for any web applications relying on Next.js, making swift remediation essential.

Oct 15, 2026

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

The Hacker News

A new wave of cyberattacks is targeting US companies through fake AI products. Attackers are mimicking popular AI software to spread malware, hijack browser sessions, and compromise business accounts. Research from ANY.RUN identified over 1,200 instances of these campaigns between April and October 2026, with a significant portion of the attacks aimed at US businesses. This surge in malicious activity is putting additional strain on Managed Security Service Providers (MSSPs), who are struggling to keep up with the growing threat. Companies need to be vigilant about the authenticity of AI tools they use and ensure they have adequate security measures in place to protect against these deceptive tactics.

Oct 15, 2026

Why AI Confidence Is Not Validation

The Hacker News

Artificial Intelligence (AI) is increasingly being used in digital forensics and incident response, but there are growing concerns about the reliability of these tools. As AI systems become more confident in their outputs, practitioners have not yet established effective methods to verify that information. This lack of governance and validation standards poses a risk, as inaccuracies in AI-generated results can lead to significant missteps in cybersecurity efforts. The gap between AI confidence and human verification could result in uncontained errors that may affect broader systems and organizations. Addressing this issue is crucial for ensuring that AI supports rather than undermines cybersecurity practices.

Oct 15, 2026

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

The Hacker News

A credential-theft campaign named GhostAction has recently intensified, affecting around 1,900 GitHub accounts. This attack, observed by GitGuardian on October 8 and 9, 2026, targeted over 30,000 repositories linked to approximately 3,000 users and organizations. The attackers aimed to extract sensitive information, specifically 3,174 secrets from public repositories' Continuous Integration (CI) systems. This incident raises significant concerns for developers and organizations using GitHub, as compromised accounts can lead to unauthorized access and potential data breaches. Users are advised to secure their accounts and monitor their repositories for any suspicious activity.

Oct 15, 2026

UK Legal Aid Agency: Hackers stole records dating back to 1978

BleepingComputer

In April 2025, the UK's Legal Aid Agency (LAA) experienced a significant data breach where hackers accessed and stole sensitive records dating as far back as 1978. This breach is concerning as it compromises the personal and legal information of individuals who relied on the Public Defender Service over decades. The stolen records may include sensitive data that could be used for identity theft or fraud. The LAA, which operates under the Ministry of Justice, is now facing scrutiny over its cybersecurity measures and the potential risks to the public. This incident underlines the importance of robust security practices, especially for agencies handling sensitive information.

Oct 15, 2026