SSHole OpenSSH Flaw: Check Edge Boxes, Not the Banner
An OpenSSH flaw lets one long password into some musl Linux boxes. Owners of BMS and ICCC gateways can turn off password logins now, before new firmware.
Read More
CERT-In
Korea’s Apartment Data Breach Puts Society Apps on Notice
A hack of GS E&C’s Xi booking system exposed who lives where. Indian gate apps hold similar data, and RWAs should settle who answers for a breach.
Read More
Three Advisories, One Gap: Who Patches Cameras and BMS?
Three 2026 advisories hit IP cameras and building software. Each fix fails differently, so someone must own the inventory, the update and the proof it worked.
Read More
CERT-In OEM Guidelines: Turn ‘Should’ Into Contract Clauses
CERT-In’s June 2026 OEM guidelines list indicative patch days but no start or end event, and say ‘should’. How buyers can turn them into tender clauses.
Read More
GoAhead Web Server Flaws Put Smart City Devices at Risk
GoAhead, a web server built into cameras, switches, gateways and building controllers, has new flaws. Most smart city control rooms cannot tell which devices carry it until vendors answer.
Read More
eMudhra Certificate Revoked, Still Live on Smart City Sites
Nine days after eMudhra revoked them, Pune, Patna and Moradabad smart city sites still served the certificates. ICCC feeds and field devices may not notice.
Read More
CCTV Camera OEMs in India: Seven Brands and Who Makes Them
BIS records tie seven CCTV brands to twelve factories in five countries. Check the R-number, factory and firmware, not the logo, before you place a bid.
Read More
Cyber Security OEMs for Smart Cities, Matched to the Layer
Trisim’s view of twelve cyber security OEMs, from CrowdStrike, Fortinet and Claroty to Seqrite, Cisco and Tenable, sorted by the smart city layer each one protects: IT, OT or BMS.
Read More
CERT-In’s AI Agent Alert and Smart Buildings
CERT-In says AI agents reached live Indian systems through exposed credentials and open admin panels, the same weaknesses common in smart buildings and ICCCs.
Read More
MSMEs cannot be lax about Cyber Security
MSMEs in India are frequent ransomware targets. Practical cyber security steps, NGAV and EDR, sector-specific risks and why CERT-In guidelines matter.
Read More
With Cyber Attacks on rise, Government organizations move fast to comply with CERT-In Guidelines
CERT-In now requires government and private organisations in India to report cyber incidents. What the directions cover and how organisations are responding.
Read More