About the desk

CyberShitty.com is an independent, India-first cyber threat desk. We explain the breaches, fraud waves, criminal operations and policy moves hitting India — and the global threats Indian security teams need to track — and what to do about them.

What we cover

• Data breaches at Indian companies and government bodies, confirmed through stock-exchange disclosures, regulators, police or the organisation itself.
• Cyber fraud at Indian scale: UPI fraud, digital arrest scams, scam compounds — with official figures from I4C, RBI and CERT-In.
• Indian cyber policy: CERT-In directions, the DPDP Act and Rules, RBI and SEBI cyber rules.
• Ransomware and data-extortion incidents worldwide, confirmed by the affected organisation or a regulator.
• Actively exploited vulnerabilities and government advisories.
• Law-enforcement operations against criminal infrastructure.
• Threat actors, described by behaviour rather than branding.

How we work

Every report links to the sources it relies on, and marks which are primary (the organisation, agency or court itself) and which are secondary (independent reporting). Claims made by criminal groups are labelled as claims. See our editorial standards and corrections policy.

What we will not do

We do not host, link to or reproduce leaked data, and we do not publish tooling or step-by-step instructions that would help an attacker.

Why the name

Because most breaches are not sophisticated. They are ordinary failures — an unpatched appliance, a help desk that resets MFA over the phone, a backup nobody tested. Naming that plainly is the point.

Who runs it

CyberShitty.com is founded and edited by Vivek Kumar, a full-stack developer and cyber security expert. Research and drafting are assisted by software tools; every published piece is checked against its primary sources before it goes live, and corrections follow our corrections policy.

Contact

Tips, corrections and press enquiries: contact the desk.