Security Deep Dives
Longer explainers on cryptography, privacy and the bigger trends shaping security.
The UPI Fraud Kill Chain: How Fake-APK Scams Defeat India's Payment Controls
UPI is protected by device binding, a UPI PIN, daily limits and NPCI's fraud engines — and fake-APK scams still drained ₹805 crore in FY26. This is the step-by-step kill chain of how a challan-APK beats each control, and the single defence that breaks each step.
- Oct 152026Oct 15, 2026
India Threat Landscape #01: Fake APKs Go Industrial, and the Edge Stays the Battleground
The launch issue of a recurring brief on the threats that actually matter for defenders and users in India. This month: APK fraud has become a Telegram-powered industry, firewalls and routers keep getting owned, and Pakistan-nexus espionage grinds on. Plus a new open tracker you can pull from.
4 min#india#threat-intel#landscape
- Mar 312026Mar 31, 2026
Your Secure Messenger is Spying on You (And You Can't Turn It Off)
No malware. No clicking on sketchy links. All a hacker needs is your phone number to track your sleep schedule, app usage, and physical location.
5 min#privacy#mobile
- Mar 32026Mar 3, 2026
The Quantum Heist: Defeating "Store Now, Decrypt Later" with Merkle Tree Certificates
State-sponsored hackers are hoarding encrypted data today to break it tomorrow. Here is how Google’s new Merkle Tree Certificates will stop them.
7 min#cryptography#post-quantum
- Feb 262026Feb 26, 2026
The Perfect Digital Storm: Why the WEF Ranks Cybersecurity as India's #1 Risk in 2026
702 attacks per minute. 369M in a year. Why the WEF just ranked cybersecurity as the ultimate threat to India’s booming digital economy.
6 min#india#cyber-risk