India’s average data breach cost hit a record Rs 25.5 crore in 2026, up 15.9 percent from Rs 22 crore the year before, according to IBM’s 2026 Cost of a Data Breach Report (ANI). Phishing, including voice and SMS phishing, remained the single most common way attackers got in, accounting for 19 percent of breaches....

“Sir… No One Can Log In.” Tuesday. 9:15 AM. Sunita Rao, Head of Operations at a mid-sized NBFC in Mumbai, was reviewing the day’s disbursement targets when the first call came in. “Ma’am… the core lending system isn’t loading.” She assumed it was routine, a server restart, a maintenance window someone forgot to mention. Then...

Every cybersecurity vendor in India has a 24/7 AISOC right now. Every single one. They all use AI. They all have compliance frameworks. They all have case studies. The sales experience has become so uniform that by the third vendor presentation you’ve sat through, you can finish their slides for them. Which means the pitch...

The assumption that trips up most organisations isn’t that cloud is insecure. It’s that because the cloud provider is a massive, well-resourced company, they’re handling the security problem. They’re not. Not the part that matters for your data. AWS, Azure, and Google Cloud are responsible for the physical datacentre, the virtualisation layer, the network fabric....

Here’s something that comes up in breach investigations more often than it should: the company had run a vulnerability scan six weeks earlier. Came back clean. They felt good about it. The attacker used a logic flaw in the application’s password reset flow that no scanner would ever catch. Automated scanning finds what it’s been...

Three weeks. That’s how long attackers typically sit inside a network before anyone notices. Not three hours. Three weeks — sometimes longer. They’re not making noise. They’re just watching. Figuring out where the valuable stuff is, who has access to what, whether anyone’s paying attention. By the time an alert fires, the damage is usually...

In most organisations, cyber defence does not fail because tools are missing. It fails because responsibilities are unclear. Common situations look like this: Firewalls exist, but rules are rarely reviewed Alerts are generated constantly, but no one knows which ones matter Logs are collected, but seldom analysed properly In the middle of all this sits...

If you sit in a hospital IT office long enough, you will hear the same sentence again and again. “We know it’s not ideal, but we can’t take that system offline.” If you sit in a factory control room long enough, you will hear a similar one. “That machine is old, but it works. Changing...

Cloud networking usually does not break all at once. It degrades slowly. At first, everything works. Applications are reachable. Users can log in. Traffic flows. Then small issues start appearing. A service becomes unreachable from one region. A firewall rule added for a quick fix never gets removed. Someone opens access “temporarily” during a migration...

Cybersecurity Isn’t Just a Buzzword Walk into any enterprise boardroom today, and you’ll hear cybersecurity discussed alongside digital transformation, cloud migration, and customer experience. But beyond tools and frameworks, cybersecurity is fundamentally about why protection exists. At its core, cybersecurity is guided by three essential goals that help organizations make decisions: What must be protected?...