Catergory

cybersecurity

IFF’s cybersecurity report for the Fourth quarter of 2024

This series lists the various cybersecurity incidents that occurred during this quarter in the country and our actions in response to them. We highlight the need for organisations to prioritise proactive measures, transparency, and public awareness to mitigate risks and foster cyber resilience.
10 January, 2025
4 min read

First read on the Telecommunications (Telecom Cyber Security) Rules, 2024

This post includes our initial analysis of the Telecom Cyber Security Rules notified in November 2024, including highlighting major changes from the draft rules issued in August 2024.
22 November, 2024
5 min read

IFF’s cybersecurity report for the third quarter of 2024

This series lists the various cybersecurity incidents that occurred during this quarter in the country and our actions in response to them. We highlight the need for organisations to prioritise proactive measures, transparency, and public awareness to mitigate risks and foster cyber resilience.
01 November, 2024
9 min read

A Draft for Cyber (In)Security: IFF’s Analysis of the Draft Telecom Cyber Security Rules, 2024

This post includes our in-depth analysis of the draft Telecom Cyber Security Rules, 2024, along with a table comparing the 2024 draft Rules with the corresponding provisions under the Prevention of the Tampering of the Mobile Device Equipment Identification Number Rules, 2017.
24 September, 2024
11 min read

IFF’s cybersecurity report for the second quarter of 2024

This series lists the various cybersecurity incidents that occurred during a quarter in the country and our actions in response to them. We highlight the need for organisations to prioritise proactive measures, transparency, and public awareness to mitigate risks and foster cyber resilience.
09 July, 2024
6 min read

Strike three: Telangana Police network’s slew of data breaches spell trouble for personal citizen data

The Telangana police network was hit by three data breaches within one week, which not only exposed sensitive personal data of Telangana residents, but also prompted investigation into the police’s alarming potential data collection practices such as tapping into hotel visitor logs.
12 June, 2024
9 min read

IFF’s cybersecurity report for the first quarter of 2024 #PlugTheBreach

This post is the first in a series tracking IFF’s work on data breaches and vulnerabilities every quarter. We will list the various cybersecurity incidents that occurred in the country and our actions in response to them.
29 April, 2024
6 min read

Delhi HC Permits SnTHostings to Withdraw Petition Challenging the Legality of 2022 Directions

SnTHostings' petition at the Delhi HC challenging the CERT-In 2022 Directions has been withdrawn on instructions from the petitioner.
18 March, 2024
3 min read

Delhi HC permits SnTHostings to respond to the CERT-In’s defence of the 2022 Directions

CERT-In has replied to SnTHostings' petition challenging the 2022 Directions, which require service providers to monitor the activities of their customers. Delhi HC has permitted SnTHostings to respond to the reply.
10 December, 2022
3 min read

Delhi HC issues notice in SnTHosting’s challenge to legality of CERT-In’s Directions

Tl;dr The Delhi HC has issued notice in a petition filed by SnTHostings challenging the legality of Direction No. 20(3)/2022-CERT-In dated April 28, 2022 (‘2022 Directions’) by the The Indian Computer Emergency Response Team (‘CERT-In’). SnTHostings provides hosting, Virtual Private Network (‘VPN’) and Virtual Private Server (‘VPS’) services. The 2022 Directions presented an existential crisis to SnTHostings as they mandated it to collect a range of personal data and share it with CERT-In on de
28 September, 2022
4 min read

Donate to IFF

Help IFF scale up by making a donation for digital rights. Really, when it comes to free speech online, digital privacy, net neutrality and innovation — we got your back!