Layer: Sunday

DPI Deep Dive — Sunday | August 17, 2026 India’s security, privacy, and trust layer — the bedrock on which all other DPI layers rest — had a turbulent week. From a sharp CERT-In advisory on sophisticated M365 phishing to the MeitY Secretary drawing a firm line on DPDP compliance deadlines, and a new regulatory framework for power-sector cybersecurity, the signals are clear: the trust infrastructure is under sustained pressure and the regulatory response is accelerating. ...

DPI Deep Dive — Sunday | August 16, 2026 Layer L7: Security, Privacy & Trust — CERT-In, DPDP Act, TRAI, and the institutions guarding India’s digital perimeter. 1. RBI and SEBI Ratchet Up Cyber Preparedness as Banking Fraud Crosses ₹48,000 Crore in FY26 The Reserve Bank of India’s annual report for FY26 has laid bare an uncomfortable truth: while the number of bank frauds fell from 23,722 in FY25 to 10,114 in FY26, the total amount involved surged 46.4% to ₹48,021 crore. Fewer incidents, vastly more damage per case — the signature of AI-amplified financial crime. ...

DPI Deep Dive — Sunday | August 02, 2026 Layer L7: Security, Privacy & Trust — covering CERT-In, DPDP Act, TRAI, and the institutions that hold India’s digital ecosystem together. 1. CERT-In Deploys AI-Driven Cyber Defence at Scale The single biggest story this week in India’s security layer is the government’s comprehensive disclosure of its AI-era cybersecurity posture. Minister of State for Electronics & IT Jitin Prasada told the Lok Sabha on July 30 that CERT-In has deployed AI-driven situational awareness systems to detect malicious domains and phishing, and now conducts AI-enabled vulnerability assessments of public-facing digital assets in sandbox environments. 1 ...

DPI Deep Dive — Sunday | July 19, 2026 This week in India’s Security, Privacy & Trust layer (L7): a nuclear plant data breach sends shockwaves through critical infrastructure defences, CERT-In weaponises AI for cyber defence, BFSI sector gets a new threat playbook, and TRAI escalates its battle against spam-call apps. Here are the five biggest developments. 1. Kudankulam Nuclear Power Plant Breach: Supply Chain Becomes the Attack Vector The most alarming cybersecurity incident of the week — and possibly the year — broke on July 15 when ransomware group World Leaks posted over 19,000 files on the dark web allegedly linked to India’s largest nuclear power plant at Kudankulam, Tamil Nadu. The documents, reportedly including engineering blueprints for Units 3 and 4, supplier details, and infrastructure records, were labelled as originating from Reliance Group, a contractor for the plant’s expansion. ...

DPI Deep Dive — Sunday | July 12, 2026 L7: Security, Privacy & Trust — This Sunday’s deep dive examines the intersection of cybersecurity enforcement, data privacy regulation, and consumer trust infrastructure in India’s Digital Public Infrastructure ecosystem. 1. TRAI vs Truecaller: When Regulating Spam Erodes Consumer Trust In what has become the most significant consumer trust confrontation in India’s telecom governance this year, the Telecom Regulatory Authority of India (TRAI) and caller ID platform Truecaller locked horns over the regulator’s anti-spam framework — exposing deep tensions between top-down regulatory design and bottom-up user behaviour. ...

DPI Deep Dive — Sunday | July 05, 2026 Layer L7: Security, Privacy & Trust — CERT-In, DPDP Act, TRAI, RBI cybersecurity norms, and the evolving regulatory perimeter around India’s digital ecosystem. 1. MeitY’s Messaging Blitz: Notices to WhatsApp, Telegram, and Signal on Username Features In what may be the most sweeping government intervention into messaging-platform product design in any major democracy, the Ministry of Electronics and Information Technology (MeitY) dispatched formal notices to WhatsApp (July 1), Telegram, and Signal (July 2) demanding that each platform explain how their username features protect users from fraud and impersonation — or justify why those features should exist at all. ...

DPI Deep Dive — Sunday | June 28, 2026 Exploring L7 — Security, Privacy & Trust (CERT-In, DPDP, TRAI) The Week in Security & Trust: Supply Chain Breaches, Platform Blocking, Data Centre Fires, and the Evolving Regulatory Landscape This week has been one of the most consequential in recent memory for India’s L7 security, privacy, and trust layer. From a staggering ransomware breach at a critical Apple and Tesla supplier, to the first-ever blanket ban of a major messaging platform upheld by the judiciary, to a devastating data centre fire that destroyed decades of client data and disrupted Google Cloud services — the events of June 21–28, 2026 expose the deep structural vulnerabilities beneath India’s digital surface. Here are five stories that matter. ...

DPI Deep Dive — Sunday | June 14, 2026 Layer L7: Security, Privacy & Trust — This week’s deep dive examines the intersecting threats and regulatory responses shaping India’s digital trust infrastructure. From AI-powered identity fraud to ₹53,000 crore in cumulative cyber losses, from RBI-mandated cyber assessments to spectrum policy as safety infrastructure, the picture that emerges is of a nation simultaneously accelerating its digital ambitions and confronting the security debt that accompanies them. ...

DPI Deep Dive — Sunday | May 3, 2026 Focus Layer: Governance & Grievance Coverage Period: Last 7 days (April 26 - May 3, 2026) Executive Summary India’s Governance & Grievance DPI layer accelerated dramatically this week with the nationwide rollout of Census 2027’s digital self-enumeration portal, while DARPG’s CPGRAMS grievance redressal system showed a 27% surge in case resolutions. The convergence of citizen-centric data collection (Census) and responsive grievance redressal (CPGRAMS) demonstrates how India’s digital governance infrastructure is moving from pilot to scale, integrating state-level platforms under a unified “One Nation-One Portal” architecture. ...

DPI Deep Dive — Sunday | April 05, 2026 Focus Layer: L7 Security, Privacy & Trust Coverage Period: March 29 – April 05, 2026 Executive Summary This week’s L7 Security, Privacy & Trust developments centre on two major vectors: the operationalisation of India’s Digital Personal Data Protection (DPDP) Act and ongoing cybersecurity capacity building by CERT-In. The DPDP Rules, notified in November 2025, entered their 18-month compliance transition period, with the Data Protection Board of India now being established in the National Capital Territory. Meanwhile, CERT-In’s 2026 cybersecurity directives have introduced new obligations including mandatory security auditing, enhanced incident reporting timelines, and a space systems cybersecurity framework — reflecting the government’s expanding conception of critical digital infrastructure. ...