DPI Brief — October 08, 2026

Coverage window: 7 October 2026, 08:00–8 October 2026, 08:00 IST.

Three developments cleared the date and evidence checks: a new UPI circular listing, TRAI’s Balasore network-quality assessment, and a CERT-In vulnerability note. The TRAI findings come from field tests conducted in August, though the assessment was posted this week. No new dated primary-source announcement surfaced for the other named layers in this scan; that is a coverage result, not proof that nothing changed anywhere.

1. NPCI adds a UPI circular on international mobile numbers

The latest comparison of NPCI’s UPI circular index, captured on 7 October, lists UPI OC No. 161A, titled “Addition of New Countries to the List of Permitted International Mobile Numbers in UPI.” The NPCI UPI circulars page now shows the entry. This is an L2 payments update: it concerns the eligibility list for international mobile numbers associated with UPI, rather than a change to everyday domestic transfers.

The title alone does not establish which countries were added, when the change takes effect, or which banks and apps have implemented it. NPCI’s linked circular PDF returned HTTP 403 during verification, so those details could not be checked. A second new index row, OC No. 238, has only the generic title “Please get in touch with your bank” and no downloadable document; it is not possible to summarize its substance. We therefore treat OC 161A as a newly listed notice—not evidence that service is already available in newly added countries.

2. TRAI finds uneven signal quality on Balasore test routes

TRAI’s 7 October assessment reports drive tests across 345 km in Balasore and nearby Odisha locations on 18–20 August. Its technical annexure counts poor-signal samples against TRAI’s thresholds: 1,029 of 43,646 for Airtel, 6,758 of 41,512 for BSNL, 948 of 42,851 for Reliance Jio, and 7,002 of 42,776 for Vodafone Idea. That is roughly 2.4%, 16.3%, 2.2% and 16.4%, respectively, of the samples collected for each operator.

These figures identify sampled signal shortfalls on a defined route; they are not a measure of the share of residents without coverage, nor a nationwide ranking. The same annexure records dropped calls and periods of call silence, but the tests are a snapshot from August, not a live October measurement. The public-interest question is what operators and the Odisha service area do with the identified weak spots. The release presents test results; it does not set out a remediation deadline or a follow-up measurement date. TRAI sits in L7 Trust in this brief’s map because reliable connectivity is part of the environment in which digital services have to work.

3. CERT-In flags a denial-of-service flaw in Citrix gateways

CERT-In’s CIVN-2026-0492, issued on 7 October and rated High, describes a memory-overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway. CERT-In says a remote attacker could send a specially crafted request and cause denial of service. Affected releases include ADC/Gateway 14.1 before 14.1-73.41 and 13.1 before 13.1-64.28, with separate FIPS/NDcPP thresholds listed in the advisory. Administrators should check their deployed versions and apply the Citrix security update. The notice describes potential impact; it does not report confirmed exploitation. This is an L7 operational-security alert, not an Aadhaar or UPI breach.

Seven-layer scan

  • L1 Identity: No new UIDAI, Aadhaar or eKYC notice verified in the reviewed sources.
  • L2 Payments: NPCI’s newly listed UPI OC 161A; implementation details remain unverified.
  • L3 Documents: No fresh DigiLocker, eSign or API Setu notice surfaced.
  • L4 Commerce: No fresh ONDC or GeM announcement surfaced.
  • L5 Sectoral: No fresh ABHA/ABDM or AgriStack notice surfaced.
  • L6 Governance: No fresh CPGRAMS or eOffice update surfaced.
  • L7 Trust: TRAI’s Balasore assessment and CERT-In’s Citrix advisory.

Next checks: obtain the OC 161A text and confirm its effective date and participating providers; look for TRAI follow-up on Balasore weak-signal locations; and verify that affected Citrix deployments are patched. We excluded older UPI statistics and earlier agriculture or Aadhaar stories rather than presenting them as new developments.