#cyber-security
SBI says 3,897 customer records exposed on dark web; 'preliminary', bank tells exchanges
SBI disclosed a data loss incident after an alert that customer data was suspected to be exposed on the dark web. A preliminary analysis found 3,897 customer records with personally identifiable information among about 3.75 lakh records. The bank said it was alerted on October 16 by its threat-intelligence provider, the Defence Cyber Agency and CERT-In.
Security keys behind millions of website certificates were so weak, one was just '4'
Eight private keys of Indian certificate authority eMudhra's intermediate certificates were compromised, generated with too little randomness and recoverable from public certificates. One key was literally the number 4. Chrome, Firefox, Apple and Microsoft moved to block the certificates within hours.