The second edition of the Digital Threat Report 2025-26 was jointly released by the Ministry of Electronics and Information Technology (MeitY), the Indian Computer Emergency Response Team (CERT-In), the Computer Security Incident Response Team in Finance (CSIRT-Fin) and cybersecurity firm SISA. The report focuses on the banking, financial services, insurance and digital payments ecosystem, and draws on digital forensics research, incident response data and analysis of adversarial AI use.

Its central finding is a shift away from direct system compromise toward what the report calls trust-chain manipulation — attackers targeting biometric onboarding, partner applications, AI-driven decision-making, real-time payments and APIs rather than simply attacking passwords or transactions head-on. Social engineering and business email compromise attacks have intensified, the report noted, while credential theft and session hijacking have become the dominant way attackers gain initial access. Perhaps more strikingly, the report said phishing attempts have become sophisticated enough to be context-aware, making them almost indistinguishable from legitimate communication — a shift that has made BFSI the most targeted sector overall.

Underlying much of this is what the report's authors describe as AI asymmetry: offensive capabilities are advancing faster than defensive ones, letting comparatively low-resource attackers carry out operations that once required specialist teams and weeks of manual effort. The report noted that six of seven predictions from last year's edition have already materialised, illustrating how quickly threats are moving from emergence to active exploitation — a gap that's narrowed from years down to months or even weeks.

MeitY Secretary S. Krishnan, speaking at the report's launch, said trusted partnerships between public institutions and industry are essential to strengthening digital trust, calling the report a meaningful collaboration between CERT-In, CSIRT-Fin and SISA. CERT-In Director General Dr Sanjay Bahl said cyber resilience must be treated as a shared responsibility across institutions, regulators and the broader digital supply chain as India's financial ecosystem becomes more interconnected and real-time. SISA founder and CEO Dharshan Shanthamurthy said the narrowing gap between innovation and exploitation changes how the industry needs to defend itself.

To address the risks identified, the report recommends making active liveness detection standard for digital onboarding, adopting continuous session assurance through behavioural biometrics and device monitoring, and extending identity governance beyond human users to cover service accounts, machine identities and autonomous AI systems as well.

The report's release follows a separate industry study by the Boston Consulting Group and the Data Security Council of India, published earlier this year, which found cyberattacks on Indian BFSI institutions have roughly doubled since 2021 and now occur at 1.6 times the global average — with mid-sized institutions facing the highest exposure due to comparatively lower cybersecurity spending.

Centre acts after reports of remote e-rickshaw shutdowns; advisory issued to drivers to secure Bluetooth-enabled battery systems

The Centre has ordered the removal of seven Chinese mobile applications linked to Bluetooth-enabled battery management systems (BMS) used in electric rickshaws after receiving hundreds of complaints from across the country alleging that vehicles were being remotely switched off while in operation.

The move comes after incidents reported from several states, including Madhya Pradesh, Delhi, Uttar Pradesh and Uttarakhand, where e-rickshaw drivers claimed that their vehicles suddenly stopped functioning in the middle of roads, causing inconvenience, financial losses and safety concerns.

According to officials, the Ministry of Electronics and Information Technology (MeitY) directed the concerned app stores to remove seven applications, including those associated with battery management systems manufactured by Chinese companies. The decision follows growing concerns over cybersecurity vulnerabilities and the possibility of unauthorized remote access to battery systems.

Hundreds of complaints prompted government action

Government sources indicated that authorities had been receiving complaints on an almost daily basis from different parts of the country. In Bhopal alone, police reportedly received dozens of complaints, while similar incidents were reported in Delhi, Uttar Pradesh and Uttarakhand.

Investigations suggested that some Bluetooth-enabled lithium battery systems installed in e-rickshaws could be remotely accessed if adequate security measures such as password protection were absent. In certain cases, individuals allegedly connected to nearby battery systems using mobile applications and activated a "discharge" command, causing the vehicle to stop immediately.

The ministry has advised users to verify whether battery management applications installed on their devices are genuine and to uninstall applications that are no longer supported or appear suspicious.

How the battery management apps function

Battery Management System (BMS) applications are commonly used to monitor lithium-ion battery health, charging status, temperature and overall performance. These applications communicate with batteries through Bluetooth connectivity, allowing users to monitor battery parameters from their smartphones.

However, cybersecurity experts warn that batteries lacking proper authentication or default passwords may become vulnerable to unauthorized access.

The report noted that older lead-acid battery-operated e-rickshaws are generally unaffected because they do not use Bluetooth-based battery management systems. Similarly, branded lithium battery manufacturers that provide encrypted software and secure password protection are considered relatively safer against such misuse.

What drivers should do if the vehicle stops

Technology experts have advised drivers that if an e-rickshaw suddenly shuts down, they should first switch off the vehicle using the key, wait for five to ten seconds, and then restart it. In many cases, the battery management system resets itself and resumes normal operation.

Drivers have also been advised to disable Bluetooth on their mobile phones when not required, change default Bluetooth passwords, and consult battery manufacturers to disconnect unnecessary Bluetooth modules wherever possible.

Tampering with battery systems may attract legal action

Authorities have warned that intentionally accessing or interfering with another person's battery management system without authorization constitutes a cyber offence under Indian law. Such actions may attract criminal prosecution under provisions of the Information Technology Act relating to unauthorized access and computer-related offences.

Officials also emphasized that deliberately stopping a moving vehicle through digital interference could create public safety risks and may invite additional legal consequences.

The government has appealed to e-rickshaw owners, battery manufacturers and service providers to strengthen cybersecurity measures while encouraging users to install software updates only from trusted sources.

As India's electric mobility ecosystem expands rapidly, the latest action underscores the growing importance of cybersecurity alongside road safety, particularly as connected vehicle technologies become increasingly common across the transport sector.

The Ministry of Electronics and Information Technology (MeitY) has ordered a temporary ban on messaging platform Telegram in India under Section 69A of the Information Technology Act, 2000, officials confirmed on Tuesday. The restriction will remain in effect until June 22, covering the NEET (UG) 2026 re-examination scheduled for June 21.

The government has also directed Telegram to disable its message editing feature in India until June 30, even after the exam lifts. This means users will not be able to edit previously sent messages during this period.

According to the National Testing Agency (NTA), the action was taken because certain individuals were using Telegram's edit function to create fake evidence of paper leaks in national-level examinations. "Some people would edit old messages and add question papers or PDFs to them. Later, it was claimed that the paper had leaked before the exam," an NTA press release stated.

Multiple channels demanding money for exam papers

The agency said several Telegram channels were operating under names like "Paper Leaked NEET", "Re-NEET 2026", "Private Mafia", and "REE NEET MAFIAA". Officials said these channels were demanding thousands to lakhs of rupees from students and parents in exchange for purported exam papers.

The Indian Cybercrime Coordination Centre (I4C), in collaboration with Bihar, Gujarat, and Rajasthan Police, has already taken action against several Telegram channels, groups, and bots. The Ahmedabad Cyber Crime Branch has arrested members of an interstate cyber fraud gang linked to the racket.

Investigations have so far revealed eight Telegram channels, transactions worth approximately ₹1.5 crore, and about 1,000 mobile numbers connected to the fraud, police sources said.

NTA: Ban last resort, inconvenience unavoidable

The NTA acknowledged the ban might inconvenience general users but defended the move as a last resort. "Prior to this, several steps were taken, including the removal of objectionable content. This decision was necessary to maintain the fairness of examinations," the agency said.

The NEET-UG examination, originally conducted on May 3, was cancelled following allegations of question paper leaks in several states. The NTA scrapped the exam on May 12 after investigation found indications of irregularities. The re-examination will now be held on June 21.

Changes made for re-exam

The NTA has increased the exam duration from 180 minutes to 195 minutes for the re-test. Space for rough work has also been expanded in the answer sheet.

NEET serves as the gateway to over 1 lakh medical seats across India, including MBBS, BDS, AYUSH, nursing, and other courses at premier institutions such as AIIMS and JIPMER.

The agency has advised students not to trust unconfirmed information circulating on social media and to rely only on official updates at neet.nta.nic.in. Further details on the ban's enforcement are awaited.

The Centre has ordered a temporary ban on access to Telegram in India until June 22 and directed the platform to disable its message‑edit feature in the country until June 30, officials said on Tuesday. The move comes days before the National Eligibility cum Entrance Test (NEET‑UG) re‑examination on June 21, which was called after a paper‑leak controversy.

The National Testing Agency (NTA) said the Ministry of Electronics and Information Technology (MeitY) issued the order under Section 69A of the Information Technology Act, 2000. According to the NTA, the edit facility on Telegram was being misused to create forged evidence of paper leaks — users were editing old messages to insert question papers or PDFs and later claiming that leaks had occurred before exams.

“The step aims to curb circulation of fabricated evidence and ensure fairness of the re‑examination,” an NTA statement said, adding that the restriction on Telegram’s access will remain in effect through June 22 and the edit feature will be disabled until June 30. The agency acknowledged the inconvenience to ordinary users but called the measures “necessary” for exam integrity.

The NTA said it had exhausted other options before the ban, including requests to remove objectionable content and coordination with law‑enforcement agencies. The Indian Cyber Crime Coordination Centre (I4C), working with police teams in Bihar, Gujarat and Rajasthan, has already taken action against several Telegram channels, groups and bots linked to exam malpractice and extortion.

Investigations have revealed organised activity on channels using names such as “Paper Leaked NEET”, “Re‑NEET 2026”, “Private Mafia” and variations claiming to supply papers. The Ahmedabad Cyber Crime Branch has detained members of an interstate cyber‑fraud gang, and the probe has reportedly uncovered around eight Telegram channels, roughly 1.5 crore rupees in transactions and about 1,000 mobile numbers connected to the operation.

The NTA warned students against trusting unverified information on social media and urged them to rely only on official sources: the NEET portal (neet.nta.nic.in) and NTA’s verified handles. “Information related to the exam should only be taken from official channels,” the agency said.

The ban is narrowly timed to cover the re‑exam period; access will be restored after June 22, the NTA added. The temporary disabling of message editing will remain longer to prevent retrospective manipulation of threads that could be used to manufacture false evidence.

Separately, the NTA has altered the NEET‑UG re‑exam format. The duration has been extended from 180 minutes to 195 minutes, and additional space for rough work has been provided on the answer sheet, the agency confirmed. These changes come as part of efforts to accommodate logistics and ensure students are not disadvantaged.

Student groups and legal experts said they expect pushback from users and civil‑liberties advocates over a country‑wide block of an app used by millions. Some noted that blocking platforms is a blunt tool, while others accepted targeted restrictions if backed by clear evidence of criminal misuse. The government has framed the action as a limited, evidence‑driven intervention aimed at preventing large‑scale fraud that could again derail a national exam.

Law‑enforcement agencies are continuing investigations into alleged extortion and paper‑leak networks. The I4C and state police units have been asked to follow leads and identify financial trails, administrators said. Meanwhile, the NTA reiterated that students should avoid rumours and check only official updates about exam timing, centres and protocols.

The court said the matter involves 'far-reaching issues' and sought the Centre's response on the blocking of the Cockroach Janta Party X account over national security concerns.

No immediate restoration

The Delhi High Court on Friday declined to order the immediate restoration of the Cockroach Janta Party’s X account, dealing a preliminary setback to the satirical online collective that had gathered millions of followers within weeks. Justice Purushaindra Kumar Kaurav said that while the petitioner’s arguments might have merit, the government must be heard first because the case carries “far-reaching issues”.

The bench was hearing a petition filed by CJP founder Abhijeet Dipke, who challenged the blocking of the party’s account under national security provisions. The court made it clear that any relief could only be considered after the Centre submits its stand.

Centre asked to respond

The Union government has been given four weeks to file a detailed reply. The next hearing is listed for July 6. The court also noted that neither the judges nor Dipke’s legal team have seen the actual blocking order so far.

X, the social media platform formerly known as Twitter, has been asked to cooperate. Solicitor General Tushar Mehta, appearing for the Centre, indicated that the government had concerns about the platform’s conduct in this matter, remarking that the intermediary appeared to be “assisting” the petitioner.

Review panel to examine blocking order

In a notable direction, the court said the blocking order must be reviewed by the statutory committee formed under the Information Technology Rules. That committee is required to meet every two months and has the power to examine all aspects of such orders.

Since Dipke is currently based in Boston, USA, the court added that he could request permission to appear before the review panel through video conferencing. The bench observed that confidentiality concerns around the blocking order could be examined later, but for now the review mechanism must be allowed to function.

National security grounds

According to reports, the Ministry of Electronics and Information Technology (MeitY) directed X to withhold the CJP account under Section 69A of the IT Act after receiving inputs from the Intelligence Bureau that raised national security concerns. Dipke’s petition, filed through advocate Nakul Gandhi of NG Law Chambers, argues that the move is disproportionate and stifles political satire.

The government has not publicly disclosed the specific content that triggered the blocking order. The court acknowledged that the absence of such details makes it difficult to assess the case at this stage.

How the Cockroach Janta Party emerged

The Cockroach Janta Party started earlier this month as an online spoof movement that rapidly went viral, especially among young social media users. At its peak, the group claimed hundreds of thousands of followers on X and over 22 million on Instagram.

The name drew from a remark made by Chief Justice Surya Kant during a Supreme Court hearing on May 15. The CJI had spoken about unemployed young lawyers drifting toward social media and RTI activism, using the phrase “youngsters like cockroaches”. He later clarified that the comment targeted people using fake degrees, not unemployed youth in general. Dipke, who lives in Boston, repurposed the phrase to build a satirical platform commenting on unemployment, institutional accountability and media freedom.

Free speech arguments

Senior Advocate Akhil Sibal, representing Dipke, argued that the CJP account was “pure satire” and requested temporary restoration of the account while the case proceeds. He suggested an intermediate solution – keeping individual posts blocked rather than the entire account.

The court was not persuaded to grant urgent relief. Justice Kaurav observed that this case appeared different from earlier instances where blocked accounts had been restored during legal proceedings, largely because the legal framework around such issues is still developing. “The reasons behind the blocking remain unclear,” the bench noted, adding that a full hearing after the government’s reply would be the appropriate course.

The court also asked the review committee to expedite its examination. For now, the Cockroach Janta Party’s X account stays blocked, and its millions of followers will have to wait until at least July for any possible clarity.

Govt Rolls Out Stricter Norms for AI Content: ‘Continuous’ Labelling Mandatory

MeitY mandates permanent marking of synthetic visuals, extends public feedback deadline for new IT rules

The Ministry of Electronics and Information Technology (MeitY) has introduced tougher provisions for AI-generated content, mandating that all synthetically produced visual material carry a label that remains visible for the entire duration of its display. The move directly targets the rising threat of deepfakes and digital misinformation.

Major Shift in Labelling Rule

The proposed amendment modifies Rule 3(3)(a)(ii) of the draft IT Rules. Earlier drafts required “prominent visibility” of AI labels. The revised clause now demands “continuous and clearly visible” labelling throughout the content’s lifecycle. Officials confirmed that flashing warnings or temporary disclaimers will no longer suffice.

What ‘Continuous Labelling’ Means

Under the new framework, any AI-generated image, video, or audio clip shared on digital platforms cannot hide its synthetic origin after a few seconds. Labels must remain static and readable on screen. For text-based AI content, platforms will need to embed metadata markers. The rule applies to all intermediary platforms operating in India.

Why MeitY Tightened the Norms

Sources indicated that the decision follows a sharp rise in manipulated visuals circulating on social media. Several deepfake incidents targeting public figures and electoral processes prompted the urgency. The government aims to reduce public confusion between real and fabricated events. The move also seeks to hold platforms accountable for unlabelled synthetic content.

Unusual Mid-Consultation Update

Making substantive changes while the draft rules remain open for public consultation is rare. MeitY confirmed that the amendments are still under review. The Ministry also extended the feedback deadline from April 29 to May 7. Stakeholders, including tech companies and fact-checking organisations, now have additional time to examine the stricter provisions.

Impact on Digital Platforms

Social media giants and content-sharing websites will face compliance pressure. Permanent labelling requires technical changes to video players and image displays. Smaller platforms may struggle with implementation costs. Legal experts note that non-compliance could attract penalties under the IT Act. The rules aim to increase transparency without banning generative AI tools outright.

What Happens Next

MeitY will review public comments until May 7. Following that, the ministry is expected to publish the final version of the amendments. Industry bodies have sought clarity on technical standards for “continuous visibility.” The government has indicated that a phased rollout is likely. For now, the message is clear: synthetic content can no longer hide in plain sight.

Government Push for Pre-Installed Aadhaar App Meets Stiff Resistance from Tech Giants

Apple, Samsung, and Google have voiced opposition to the proposal, raising concerns over security, privacy, and global precedent in a significant showdown between the state and Silicon Valley.

In a significant policy clash, the Indian government’s push to mandate the pre-installation of the Aadhaar app on all new smartphones has encountered firm resistance from global technology majors. A proposal floated by the Ministry of Electronics and Information Technology (MeitY) earlier this year has led to a standoff, with manufacturers like Apple, Samsung, and Google pushing back against what they term a forced onboarding that compromises user choice and device security. The development marks a crucial test of India’s digital sovereignty ambitions against global industry standards.

Industry Pushback

The Manufacturers' Association for Information Technology (MAIT) has formally communicated its opposition to the proposal. In an internal correspondence, the industry body stated it is against the pre-installation mandate, noting that this is not an isolated incident. Sources indicate that this is at least the sixth instance where the government has attempted to mandate the pre-loading of specific applications, including the Sanchar Saathi app in late 2025, creating a persistent pattern of regulatory friction. The association argues that such demands disrupt the existing user consent framework.

Core Concerns Emerge

The resistance from major players centres on three critical concerns. First and foremost is the issue of device security. Industry experts warn that a pre-installed app is deeply integrated into the operating system; any vulnerability found in the Aadhaar app could potentially compromise the entire device, including biometric authentication layers. Secondly, there is an economic cost. Manufacturers argue that developing India-specific production lines to accommodate such mandates would lead to a 2-3% increase in the final price of smartphones, a cost that would ultimately be borne by Indian consumers.

A Question of Precedent

Beyond immediate security and cost, the battle is also about establishing a global precedent. For multinational companies like Apple and Samsung, acceding to India’s request could open the floodgates for similar demands from other nations, including China and Russia. This, they fear, would effectively dismantle their control over their proprietary operating systems and hardware ecosystems, forcing them to create fragmented, market-specific devices that undermine their global brand integrity.

Security and Privacy at the Fore

Privacy advocates and digital rights experts have weighed in, describing the pre-installation proposal as a serious erosion of personal choice. They highlight that the primary threat to privacy is not just data collection, but the removal of user agency. An app that is pre-installed and non-removable, linked to a citizen’s biometrics, bank accounts, and mobile number, transforms from a tool of convenience into a potential infrastructure for surveillance. Critics argue that convenience is often the first step towards control, and a silent, default installation implies a forced consent that undermines foundational privacy rights.

A Pattern of Mandates

This current confrontation mirrors a previous attempt with the Sanchar Saathi app in late 2025. The government had sought to make that application, designed for telecom monitoring and fraud detection, a mandatory, non-removable pre-install. The move was met with a massive backlash from the industry and privacy advocates, forcing the government to temporarily retreat from the mandate. Observers note that the Aadhaar proposal represents a more significant escalation, given the app’s role as a foundational identity document.

What Next

The standoff places India at a policy crossroads. The government argues its case based on sovereignty, national security, and improved welfare delivery, positioning itself alongside nations like Russia and China that enforce strict digital controls. The industry and privacy advocates, however, are pushing for a path similar to the US and EU, where user consent and data protection remain paramount. With no immediate resolution in sight, the coming months will be crucial in determining whether India can build its unique digital infrastructure model without forcing a fundamental compromise on user security and device integrity.

In a major move to clean up the digital landscape, the Indian government has officially shortened the clock for social media giants. Starting February 20, 2026, platforms like X (formerly Twitter), YouTube, Meta (Facebook and Instagram), and Snapchat must remove flagged deepfakes and illegal AI content within just three hours.

The Ministry of Electronics and Information Technology (MeitY) notified the amendments to the IT Rules 2021 on Tuesday. This update shifts the responsibility squarely onto the platforms to ensure that "synthetically generated information" does not mislead the public or cause harm.

Mandatory Labelling and Digital Watermarks

One of the most significant changes is the mandatory labelling of AI-generated content. Under the new Rule 3(3), any content created or modified using AI must carry a clear, prominent label.

• Metadata Identifiers: Every AI post must have a unique, permanent metadata tag embedded in its code. This "digital fingerprint" cannot be hidden, edited, or deleted.

• Visibility Standards: For videos and images, the AI label must be easy to spot. For audio, a disclosure must be heard within the first few seconds of the clip.

• Verification Tools: Platforms are now required to provide technical tools that can verify if a piece of content is AI-generated before a user even hits the "upload" button.

Why the 3-Hour Rule Matters Now

The urgency comes after several high-profile incidents. From the viral deepfake of actress Rashmika Mandanna to a manipulated video of cricket legend Sachin Tendulkar promoting a gaming app, the speed at which misinformation spreads has outpaced traditional 36-hour removal windows.

By slashing the deadline to three hours, the government aims to stop "viral" misinformation in its tracks, particularly during sensitive periods like elections or when personal reputation is at stake.

Quarterly Warnings for Users

It’s not just the platforms under scrutiny; users are also being put on notice. Social media companies must now send quarterly warnings to their users. These notifications will remind people of the legal consequences—including potential criminal charges—for creating or sharing deceptive AI content.

"The goal is an open, safe, and accountable internet," a MeitY official stated. "Delayed removals lead to irreversible damage. We are ensuring the law keeps pace with technology."

Expert Perspective: The Cost of Compliance

While digital rights activists have largely welcomed the move to curb deepfakes, industry experts suggest a steep climb ahead for tech companies.

Practical Takeaways for Creators:

• Always Disclose: If you use AI tools to generate or heavily edit a post, use the platform's built-in "AI label" feature to avoid account strikes.

• Verify Sources: Before sharing "shocking" celebrity videos, check for the mandatory metadata or official labels.

• Stay Informed: Familiarize yourself with the new rules to avoid accidental violations that could lead to account suspension.

As the February 20 deadline approaches, the digital world watches to see if social media giants can scale their moderation speed to meet India’s new, aggressive standards.