LSN News › India

World · India Bureau

Multiple cyber vulnerabilities expose Indian internet users to escalating attack threats

Critical security flaws discovered across popular software platforms have triggered fresh concerns about online safety for Indian internet users, with cybersecurity experts warning of a surge in digital attacks over the past 24 hours.

LSN India · 22 October 2026

Multiple cyber vulnerabilities expose Indian internet users to escalating attack threats

A series of serious security vulnerabilities have emerged across multiple digital platforms, raising alarm among cybersecurity researchers and technology firms operating in India. Two significant flaws have been identified in PHP, one of the world's most widely-used web development languages, potentially exposing countless websites and applications to unauthorized access.

The vulnerabilities compound existing concerns following the discovery of weaknesses in digital certificates issued by eMudhra, a major certificate authority serving Indian government and private sector organizations. Security experts have flagged that compromised digital certificates could enable attackers to impersonate legitimate websites and intercept sensitive user data.

Additionally, researchers have identified dangerous malicious code embedded within a software update for LiteLLM, an artificial intelligence library used by developers globally. The discovery has prompted immediate warnings to organizations using the platform to verify the integrity of recent updates and implement security patches.

In response to growing cyber threats, Indian Railways has announced enhanced security measures to protect customer data and transaction information on its ticketing and reservation platforms. Officials stated that the organization is conducting comprehensive security audits and strengthening infrastructure defenses against potential attacks.

Cybersecurity analysts recommend that internet users update their software immediately where patches are available, enable two-factor authentication on critical accounts, and remain vigilant against phishing attempts that often accompany major security disclosures.