CERT-In Issues Advisory After Vulnerable Platform Exploited in Chennai

A technology platform developed by a software company in Chennai contained vulnerabilities in its API controls. These deficiencies allowed transactions to be initiated without required checks, such as customer verification. The Indian Computer Emergency Response Team issued a critical advisory, urging financial institutions to suspend compromised interfaces and strengthen transaction safeguards.

The platform's vulnerabilities were allegedly exploited to siphon funds. Following the advisory, banks and fintech companies must review their third-party integrations to ensure security checks cannot be bypassed, which impacts operational procedures and transaction integrity.