Category
Vapt
PHP2Shell: two critical PHP RCE flaws, and how to cut your risk while you patch
PHP2Shell (CVE-2026-109618 / CVE-2026-109619, CVSS 9.2) is pre-auth RCE in the PHP runtime itself. Here's the practical playbook to reduce exposure while the patch rolls out —...
Annual Pentest vs Monthly BAS: What RBI Actually Requires
RBI's 2026 Directions keep six-monthly VA and annual PT. What the clauses say, the 364-day gap they leave, and where breach-and-attack simulation fits.
RBI just rewrote the rulebook: the 2026 Cybersecurity Directions, what died with the 2016 framework, and how to pass the next audit
RBI's Cybersecurity, Technology Risk, Resilience & Assurance Directions (31 July 2026) replace the 2016 framework — effective immediately. What changed for banks and NBFCs, and...
RBI Cybersecurity Framework 2026: Complete Compliance Guide for Banks and NBFCs
Comprehensive guide to RBI cybersecurity framework compliance for banks, NBFCs, and payment banks in India. VAPT requirements, SOC mandates, and incident reporting obligations...
SEBI CSCRF Compliance: VAPT and Cyber Audit Requirements for Brokers, Exchanges, and Mutual Funds
Complete guide to SEBI CSCRF compliance — VAPT requirements, audit timelines, vulnerability remediation deadlines, and SOC mandates for stock brokers, exchanges, depositories,...
CERT-In Compliance Checklist for Banks and Financial Institutions in India
Complete CERT-In compliance checklist for banks and financial institutions — 6-hour incident reporting, log retention, VAPT requirements, and synchronised clocks. Practical...
