Praveen Hebbagodi

Sanchar Saathi: A Security Architecture Review While the Sanchar Saathi initiative is a necessary step for fraud reduction (CEIR/TAFCOP), the mobile application implementation introduces significant architectural risks that security professionals must acknowledge. Here are the critical vulnerabilities: 1. Violation of Least Privilege The app requests READ_SMS and READ_CALL_LOG permissions. While intended for fraud reporting, granting persistent background access to communication metadata breaks the Principle of Least Privilege. If the app is compromised, it becomes a surveillance tool. 2. The "Honeypot" Risk (Data Aggregation) The backend centralizes previously decentralized data: Aadhaar + All Linked SIMs + IMEI + Geo-Location. In cybersecurity terms, this creates a massive Single Point of Failure (SPoF). A breach here exposes a citizen’s entire digital and physical "Pattern of Life." 3. Broken Session Management The application lacks robust session timeouts or clear logout workflows. A stolen, unlocked device grants immediate administrative access to the user’s telecom identity without step-up authentication. 4. Supply Chain Vulnerability Mandating this as a "pre-loaded" app on handsets bypasses user consent and standard app store vetting. If the build pipeline is compromised, it introduces root-level risks to the device ecosystem. Recommendation: Utilize the web portal (sancharsaathi.gov.in) for specific tasks (blocking lost phones/checking SIMs). Avoid keeping the application permanently installed on devices used for sensitive corporate work. #CyberSecurity #Privacy #InfoSec #DataPrivacy #SancharSaathi #CISSP #RiskManagement

61

16 Comments

Don't miss the recording of Selvaratnam Uthaiyashankar's session from WSO2Con 2025: "Devant: The iPaaS Shining in the Cloud and AI-Native Era". Shankar, Senior Vice President & General Manager - Integration at WSO2, introduces Devant, a next-generation iPaaS purpose-built for the cloud and the age of AI. Discover how Devant overcomes the limitations of traditional iPaaS by offering advanced AI agent-building capabilities, end-to-end observability, and seamless multi-environment support. Learn how Devant serves as the ideal home for your AI agents, streamlining systems, automating processes, and driving smarter decision-making. Explore the key benefits, including rapid integration and automation, seamless AI agent development and deployment, proactive observability, and hybrid/multi-cloud flexibility. Watch the recording and view the slides here:https://lnkd.in/gSQyqexW

71

Catch our co-founder Vatsal Rastogi in this exclusive chat with CNBC-TV18! He talked about Lucidity’s $21M Series A funding and what’s next as we keep pushing the boundaries of cloud storage optimization. #Lucidity #CloudOptimization #SeriesA #CNBCTV18 #Startups #CloudStorage

91

🚨 Setu bolsters c-suite with former Razorpay, PhonePe, PayU execs As Pine Labs inches closer to its IPO, its API infrastructure arm Setu is strengthening its leadership team. Recent appointments include Prashanth Nimmagada (ex-Razorpay) as CTO, Vijeth Pandit as CPO, and Ramkumar Thirumurthi as CRO. The leadership refresh aligns with Setu’s growing role in UPI, KYC, and account aggregation infrastructure. The moves come as Pine Labs files for a ₹2,600 Cr IPO, eyeing global expansion and tech investment. Read more at: https://lnkd.in/gH7T9mhf By Sayan Sen #FintechIndia #StartupLeadership #PineLabsIPO #Setu #DigitalInfrastructure

130

1 Comment

🚀 Big news! Seceon is featured in CIO Insider’s special edition spotlighting the tech leaders shaping India’s digital future. In this exclusive interview, CEO Chandra Shekhar Pandey breaks down how Seceon’s AI-powered cybersecurity platform is helping MSPs, MSSPs, and enterprises detect and stop advanced threats — faster, smarter, and without tool sprawl. 🔥 Why it matters: ✅ Real-time, behavior-based threat detection ✅ One unified platform — no more stitching tools together ✅ A bold vision for cybersecurity’s next frontier “Seceon is on a mission to help organizations with AI-driven and behavior-based security solutions designed to counter sophisticated cyber threats.” 📖 Read the full interview now and see why Seceon is on every CIO’s radar! #Cybersecurity #AI #XDR #MSSP #MSP #DigitalIndia #CIOInsider #Leadership #Seceon #CyberResilience #ThreatDetection #Innovation Shikha Pandey Tom Ertel Smit Kadakia Yashesh Vaishnav Argha Bose Ed Mohr Sana Anjali Devi Pushpendra Mishra 🇮🇳 Aashish Kumar Goela Maggie MacAlpine Sarah Sheriff Alexis Lebron Prabir Datta Peter Christou Khaled Al-Najjar-MBA-CISM

43

Cybersecurity in the Age of AI With the rapid rise of AI, cybersecurity is evolving faster than ever. Swapna Bapat, Vice President & Managing Director, India and SAARC at Palo Alto Networks, delves into how AI-driven security solutions are transforming threat detection and defense strategies. As a global leader in cybersecurity, Palo Alto Networks is at the forefront of safeguarding digital ecosystems with cutting-edge innovations. Know more: https://bit.ly/41EZ6Q3 #ETCISOSecuFest #Cybersecurity #Leadership #TechConference #ETCISO

165

Our team at SigNoz recently launched a newsletter - Observability Real Talk, where we discuss OpenTelemetry, observability and open-source tooling. Here’s what we are trying to deliver in detail: - OpenTelemetry insights – tips, deep dives, and hard-to-find guidance from the field - Observability best practices – what works (and what fails) when running at scale - Making sense of your telemetry data – be it metrics, logs or traces - Debugging & performance tuning – practical workflows to troubleshoot like a pro - BTS from SigNoz – real lessons from our engineers on building and scaling an open-source observability platform If this sounds like something you want to be delivered to your inbox, subscribe to us here - link in the comments!

28

1 Comment

In our latest TechGig Leaders’ Circle Fireside Chat, we were joined by Rohan Vaidya, Area Vice President, India & SAARC at CyberArk, for an exclusive conversation on “Identity Security in the AI Era: Safeguarding the Keys to the Digital Future.” As AI transforms both opportunities and threats, he shared powerful insights on why identity is the new security perimeter, the evolving shift from Zero Trust to a passwordless future, and how developers can embed security without slowing down innovation. From real-world pitfalls to future predictions, this conversation is a must-watch for developers, security leaders, and digital innovators. Watch the full episode here: https://lnkd.in/eFdV2gnx #TechGig #LeadersCircle #CyberArk #IdentitySecurity #AI #ZeroTrust #Cybersecurity

73

Patching won't stop every breach, but segmentation will contain them. ORDR Co-Founder and CEO Pandian Gnanaprakasam explains why stopping lateral movement to critical assets is the real game-changer. 🛡️

19

Markets run on speed but they rest on trust. At CNBC’s Global Leadership Summit, the SEBI Chair’s remarks on cybersecurity weren’t dramatic but they were quietly urgent. “SEBI is emphasizing cyber security preparedness… incident response, business continuity and cyber resilience.” And it couldn’t come at a more critical time. The recent 𝗦𝗘𝗕𝗜 𝘃𝘀 𝗦𝗖𝗔𝗠 𝗵𝗲𝗮𝗱𝗹𝗶𝗻𝗲𝘀 𝗮𝗿𝗲 𝗮 𝗿𝗲𝗺𝗶𝗻𝗱𝗲𝗿 𝘁𝗵𝗮𝘁 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝘁𝗿𝘂𝘀𝘁 𝗶𝘀 𝗻𝗼𝘁 𝗷𝘂𝘀𝘁 𝗮𝗯𝗼𝘂𝘁 𝗯𝗮𝗱 𝗮𝗰𝘁𝗼𝗿𝘀 𝗶𝘁’𝘀 𝗮𝗯𝗼𝘂𝘁 𝗯𝗿𝗼𝗸𝗲𝗻 𝗴𝘂𝗮𝗿𝗱𝗿𝗮𝗶𝗹𝘀. Whether it’s insider fraud, coordinated manipulation, or data leaks, the system suffers when resilience is reactive, not proactive. Three reflections I’m taking back: • 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝘀𝗻’𝘁 𝗷𝘂𝘀𝘁 𝘁𝗲𝗰𝗵 𝗶𝗻𝗳𝗿𝗮 𝗶𝘁’𝘀 𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗶𝘁𝘆 𝗱𝗲𝘀𝗶𝗴𝗻. Will your system pause cleanly when breached? Will users know what’s happening without panic? • 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲 𝗶𝘀 𝗮𝘀 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗮𝘀 𝗽𝗿𝗲𝘃𝗲𝗻𝘁𝗶𝗼𝗻. You can’t stop every breach. But your playbook decides whether you lose confidence or gain long-term trust. • 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝗰𝗲 𝗺𝘂𝘀𝘁 𝗯𝗲 𝗱𝗲𝘀𝗶𝗴𝗻𝗲𝗱, 𝗻𝗼𝘁 𝗯𝗼𝗹𝘁𝗲𝗱 𝗼𝗻. Recovery shouldn’t rely on luck. It needs to be traceable, repeatable, and calm under pressure. We don’t need fear to drive better systems we just need better defaults. And leadership that doesn’t wait for the headlines to act. HSBC Embassy Group SEBI ITC Limited CNBC-TV18 #CNBCGLS #SEBI #CyberSecurity #SEBIvsSCAM #DigitalTrust #MarketResilience #IncidentResponse #BFSI #FinTech #GlobalLeadershipSummit #CNBCTV18GLS2025 #TheIndiaAdvantage #ProductLeadership #YogeshReflects  #YogeshWrites #YogeshJadhavInsights

48