logo

News related to
patches

Coal India Ltd cut coal production in May by 11.6 per cent year-on-year to 56.13 million tonnes, underscoring a shift in the country’s energy market as high inventories, uneven industrial demand and rising non-fossil capacity alter the operating rhythm of the world’s largest coal miner.

The May figure, based on provisional operational data for the month ended 31 May, came against a monthly target of 66.28 million tonnes. Coal offtake, the volume supplied to power utilities and other customers, rose 2.26 per cent to 66.18 million tonnes, showing that dispatches continued to outpace production as the company worked down inventories rather than pushing output at full pace.

The fall marks the second straight month of reduced production after April output dropped 9.7 per cent to 56.1 million tonnes. The pattern points to a deliberate balancing act by Coal India, which remains central to electricity security but is also facing the consequences of heavy stock accumulation at mines and the growing role of solar, wind, hydro and nuclear generation in meeting demand.

Coal India, through its subsidiaries, accounts for about four-fifths of domestic coal output. Its production in the first two months of the 2026-27 financial year stood at 112.19 million tonnes, below the target of 127.85 million tonnes. The company’s annual production target for the year is 815 million tonnes, a demanding goal at a time when the power market is becoming more seasonal and less dependent on continuous coal expansion.

Demand for coal has not collapsed. Peak electricity demand touched a record level of about 270.8 gigawatts in May as a severe heatwave lifted cooling needs across several regions. Coal-fired plants remain the backbone of the grid, generating more than 70 per cent of electricity despite the rapid expansion of non-fossil capacity. Yet the pressure on Coal India is no longer simply to mine more. It is to supply coal to the right locations at the right time while avoiding excessive stock build-up at pitheads.

Inventories have become a key concern. Coal stocks across the system stood at about 168 million tonnes in late May, including 47.6 million tonnes at power plants and 113.5 million tonnes at Coal India mine-heads. The company has said those reserves are enough for 19 days of consumption. Mine-head stocks were about 10 per cent higher than a year earlier, creating operational and financial incentives to moderate production while dispatches catch up.

The May subsidiary-wise data showed a mixed picture. Mahanadi Coalfields produced 14.26 million tonnes, about 20.1 per cent lower than a year earlier, while Northern Coalfields fell 23.69 per cent to 9.47 million tonnes. Bharat Coking Coal declined 25.51 per cent to 2.28 million tonnes. Western Coalfields dropped 8.4 per cent and Eastern Coalfields was down 3.63 per cent. South Eastern Coalfields was the exception, increasing output 4.53 per cent to 14.42 million tonnes, while Central Coalfields edged up 0.44 per cent to 6.2 million tonnes.

The company’s offtake profile was more resilient. Mahanadi Coalfields dispatched 18.34 million tonnes in May, up 5.77 per cent, while Central Coalfields rose 17.45 per cent and Eastern Coalfields gained 6.48 per cent. South Eastern Coalfields increased dispatches by 3.18 per cent. The weaker areas included Bharat Coking Coal, where offtake fell 16.16 per cent, and Northern Coalfields, down 8.44 per cent.

The wider power sector is changing quickly. Non-fossil fuel capacity reached 283.46 gigawatts by the end of March, including 150.26 gigawatts of solar, 56.09 gigawatts of wind, 51.41 gigawatts of large hydro and 8.78 gigawatts of nuclear power. Renewable energy additions in 2025-26 were driven mainly by solar, which has become a significant contributor during daylight peaks. Even so, the grid still leans heavily on coal after sunset and during periods when renewable output weakens.

That split has created a more complex operating environment. Coal India is being asked to ensure reliability during heatwaves, support power plants with low stocks and maintain supplies to non-power consumers, while policymakers are also pushing cleaner energy, storage and transmission upgrades. The result is a coal market where peak demand can be exceptionally strong even as average growth in coal consumption becomes less predictable.

By Krishna Jha The entire origin and development of living world has led to the emergence of complicated natural environment of which human beings are part and parcel. Environment and society are inter-related and inter-dependent. Society has come to rely on the natural environment for its existence. Any destruction of environment is sure to pose […]

The article Supreme Court Bench Has To Give More Clarity To Their Views On Aravalli Hills appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

Roundcube Webmail administrators are being pressed to install emergency updates after maintainers fixed a set of security flaws that could expose email systems to database manipulation, script injection, server-side request forgery and other attacks. Versions 1.6.16 and 1.7.1, released on 24 May 2026, address vulnerabilities affecting the 1.6 long-term support line and the 1.7 branch. The most closely watched issue is a pre-authentication SQL injection flaw in […]

InMotion Hosting said it contained a critical cPanel and WHM authentication-bypass flaw that threatened one of the web-hosting industry’s most widely used management platforms, after blocking exposure across its network and patching affected systems. The vulnerability, tracked as CVE-2026-41940, created a high-impact route for unauthenticated attackers to gain access to cPanel and WebHost Manager interfaces. The issue drew urgent attention because cPanel is used by hosting providers, […]

Cybersecurity teams across India face a compressed response window after CERT-In urged organisations to fix actively exploited internet-facing vulnerabilities within 12 hours wherever feasible, marking a sharper regulatory push as artificial intelligence accelerates cyber-attack cycles.

The guidance, issued on May 25 in a 38-page blueprint, reflects growing official concern that attackers are using generative AI, large language models and autonomous tools to discover exposed systems, weaponise flaws, craft phishing lures and scale malware operations faster than conventional security programmes can respond. The document places rapid remediation, continuous monitoring and exposure reduction at the centre of enterprise cyber defence.

CERT-In’s most stringent timeline applies to known exploited vulnerabilities affecting internet-facing and critical systems, including applications, identity platforms, cloud assets, APIs, operational technology and systems supporting essential business functions. Organisations are advised to patch, mitigate or isolate such weaknesses within 12 hours where feasible. Critical externally exposed vulnerabilities should be addressed within one day, while known exploited flaws inside internal systems should be fixed within one day unless compensating controls are implemented and documented.

The blueprint also recommends that critical internal vulnerabilities affecting high-value systems be remediated within three days, and high-severity vulnerabilities within five days based on risk prioritisation. Where patches are unavailable, organisations are expected to use temporary protections such as isolation, access restrictions, web application firewalls, API shields, feature disabling and enhanced monitoring until permanent fixes are deployed.

The directive signals a shift from audit-driven cybersecurity to continuous exposure management. CERT-In has warned that organisations can no longer depend on periodic assessments or reactive incident response when automated tools can identify weak credentials, misconfigured systems, insecure APIs and vulnerable internet-facing services at machine speed. The approach requires security teams to maintain live inventories of assets, prioritise exposed systems and test whether controls work under attack conditions.

AI is changing both sides of the cyber equation. Attackers can use it to automate reconnaissance, write exploit code, refine phishing messages, generate synthetic identities and adapt malicious software. Defenders are being pushed to use similar capabilities for anomaly detection, threat hunting, automated triage and faster containment. The risk, however, is that poorly governed AI systems can themselves become attack surfaces through prompt injection, data leakage, model manipulation, poisoned training data, model theft and compromised orchestration pipelines.

The guidance gives particular weight to organisations operating in banking, financial services, telecom, healthcare, government, energy, transport, cloud services and other critical infrastructure-linked sectors. These environments often rely on interconnected digital systems, third-party software, outsourced technology providers and legacy platforms, creating wider exposure when a single flaw is weaponised quickly.

Global breach data has reinforced the urgency behind faster patching. Software vulnerability exploitation has overtaken stolen credentials as a leading breach entry point in major datasets, while ransomware remains a high-impact threat. Security teams also face growing pressure from supply-chain compromise, shadow AI usage, cloud misconfiguration and business email compromise. Unauthorised use of public AI tools has become a data governance issue as employees may upload source code, business documents, credentials or customer information into platforms outside corporate oversight.

CERT-In’s blueprint calls for a zero-trust approach, least-privilege access, layered controls and secure-by-design practices across applications, infrastructure and AI workflows. It urges organisations to maintain visibility into AI deployments, restrict sensitive data uploads to public AI platforms, log AI activity, conduct adversarial testing and keep human approval for critical autonomous actions.

Software supply-chain visibility is another major focus. Organisations are encouraged to use software bills of materials and related inventories for AI models, cryptographic assets and hardware components to understand dependencies, validate provenance and coordinate remediation when vulnerabilities emerge in third-party products.

The new expectations build on India’s existing cyber incident reporting framework, under which specified cyber incidents must be reported to CERT-In within six hours. The latest blueprint does not merely extend compliance obligations; it raises operational expectations for boards, chief information security officers and technology vendors by linking resilience to the speed of response.

Smaller organisations may struggle with the 12-hour benchmark because patch testing, downtime concerns, legacy dependencies and staffing shortages often slow remediation. The guidance therefore recognises feasible mitigation as part of the response, but it also makes clear that unmanaged exposure is no longer acceptable when attackers can exploit public-facing weaknesses within hours.

Microsoft’s early lead in AI-assisted software development is coming under pressure as outages at GitHub, leadership changes, security incidents and fast-moving rivals reshape one of the most important contests in enterprise technology. GitHub Copilot gave Microsoft a commanding start in the AI coding race. It was launched before many competitors had mature developer products, and it benefited from GitHub’s position at the centre of global software collaboration. […]

Cornell engineers have built a robotic collective that moves, reshapes and adapts without a central controller, marking a fresh advance in efforts to design machines whose behaviour emerges from physical interaction rather than software commands alone. Called the Cross-Link Collective, the system uses dozens of small robotic modules that are weak and inefficient on their own but capable of sustained group motion when they connect, disconnect and […]

Advertisements

Companies are pushing vulnerable software into production even as artificial intelligence expands the speed, volume and complexity of application development across global supply chains. New industry findings show 75% of organisations often or sometimes deploy code they already know contains security weaknesses, underscoring a persistent gap between software delivery targets and risk controls. The figure marks only a limited improvement from last year’s 81%, suggesting that boards […]

Apache OFBiz users have been urged to move to version 24.09.06 after disclosure of an authentication bypass flaw that can be chained to remote code execution, exposing enterprise resource planning systems to takeover through a manipulated password-change workflow. Tracked as CVE-2026-45434, the vulnerability affects Apache OFBiz versions before 24.09.06. It stems from improper authentication handling in the platform’s password-change logic, where a forced password reset condition may […]

Google has issued a Chrome security update after fixing multiple flaws that could allow attackers to execute code remotely, disrupt browser sessions, steal information, bypass restrictions or spoof content on affected systems. The update moves Chrome’s stable desktop channel to version 148.0.7778.178/179 for Windows and macOS, and 148.0.7778.178 for Linux. It is being rolled out globally through the browser’s automatic update mechanism, though users and administrators may […]

OpenAI has launched Daybreak, a cybersecurity initiative designed to use frontier AI models and Codex Security to find software flaws, generate fixes and verify remediation before attackers can exploit weaknesses in code. Daybreak marks a sharper push by the ChatGPT maker into defensive cybersecurity, where AI systems are being positioned not merely as coding assistants but as tools for secure-by-design software development. The service is built around […]

A publicly released exploit for a critical cPanel and WebHost Manager flaw has intensified pressure on hosting companies and website operators after monitoring groups reported tens of thousands of likely compromised internet-facing systems. The vulnerability, tracked as CVE-2026-41940, allows unauthenticated attackers to bypass login controls and obtain administrative access to affected cPanel & WHM environments. The weakness carries a CVSS severity score of 9.8, placing it among […]

Samsung’s next free Android upgrade is set to sharpen security controls on Galaxy phones, even as some owners of flagship models complain of battery drain, overheating and shorter screen-on time after April software patches. One UI 8.5, Samsung’s Android 16-based interface, is expected to expand a package of privacy and anti-theft protections across supported Galaxy devices after debuting on the Galaxy S26 series. The update is expected […]

Google has issued an urgent Chrome security update after fixing 30 vulnerabilities, including four critical memory-related flaws that could expose users to attacks through compromised or malicious web pages. The update moves Chrome’s stable desktop channel to version 147.0.7727.137 or 147.0.7727.138, depending on platform, and is being rolled out across Windows, macOS and Linux. Users have been advised to restart the browser after the update is installed, […]

Hackers have turned a critical React Server Components flaw into a structured exploitation operation, using Telegram bots, automated scanners and AI-assisted tooling to track more than 900 confirmed compromises across internet-facing applications. The campaign centres on React2Shell, tracked as CVE-2025-55182, a maximum-severity remote code execution vulnerability disclosed in December 2025. The flaw affects React 19.0, 19.1.0, 19.1.1 and 19.2.0 through packages including react-server-dom-webpack, react-server-dom-parcel and react-server-dom-turbopack, and […]

Anthropic’s Model Context Protocol, a fast-growing standard used to connect AI models with external tools and data, has come under intense scrutiny after security researchers disclosed a critical weakness that they say can open the door to arbitrary remote code execution across a broad swathe of the AI software stack. The issue, published on April 15, centres on how MCP implementations handle STDIO-based server configurations and command […]

Anthropic’s Claude Opus has been thrust into a fresh security debate after researcher Mohan Pedhapati said he used the model to help build a working V8 exploit chain that achieved code execution against an outdated Chromium build bundled with Discord. Pedhapati, CTO of Hacktron and known online as s1r1us, said the exercise ran over about a week, consumed 2.3 billion tokens, cost $2,283 in API fees and […]

Commercial artificial intelligence models are advancing quickly in vulnerability research and exploit development, sharpening concern across the cybersecurity industry that tools built for productivity and defence could also lower the barrier for offensive misuse. A study by Forescout’s Vedere Labs found that commercial systems now outperform open-source and underground alternatives in identifying software flaws, while more than half of the models tested were able to generate exploits […]

Attackers are exploiting a critical flaw in nginx-ui, an open-source web interface used to manage Nginx servers, exposing organisations to unauthorised server control through a weakness in the product’s Model Context Protocol integration. The bug, tracked as CVE-2026-33032, carries a CVSS severity score of 9.8 and allows an unauthenticated attacker on the network to invoke privileged functions that can rewrite configuration files, reload services and alter how […]

OpenAI has launched GPT-5.4-Cyber, a new version of its frontier model tailored for defensive cybersecurity work, moving quickly to answer growing concern that ever more capable AI systems could help both defenders and attackers in a widening digital arms race. The release came a week after Anthropic disclosed Claude Mythos Preview under its tightly controlled Project Glasswing programme, setting up a new contest over who can best […]

Google has issued an emergency-style security update for Chrome after disclosing 31 vulnerabilities in the desktop browser, including five rated critical, in a release that underlines how quickly memory-safety flaws in widely used software can become a serious risk for consumers, businesses and public institutions. The stable desktop channel moved on April 15 to version 147.0.7727.101/102 for Windows and Mac, and 147.0.7727.101 for Linux, with the rollout […]

A critical security flaw in the User Registration & Membership plugin for WordPress has exposed thousands of websites to the risk of full administrative takeover, after researchers disclosed that versions up to and including 5.1.2 could allow attackers to gain elevated privileges without valid credentials. The issue, tracked as CVE-2026-1492, stems from improper privilege management during membership registration, creating a path for unauthorised users to register with […]

Apache Tomcat users are being urged to move quickly after the Apache Software Foundation disclosed a set of security flaws that could let attackers undermine encrypted traffic protections, slip past certificate checks in some scenarios and exploit a defect introduced by an earlier fix. The most urgent concern centres on Tomcat’s EncryptInterceptor, where one vulnerability was followed by a second flaw in the remedy itself, creating a […]

Amazon Web Services has patched three high-severity vulnerabilities in its open-source Research and Engineering Studio platform, closing weaknesses that could have allowed authenticated users to run commands on key systems or gain broader permissions inside cloud environments used for scientific and engineering work. The flaws affected AWS Research and Engineering Studio, known as RES, a web-based portal that helps administrators build and manage controlled research and engineering […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
India weighs replacing ageing wind turbines to raise generation // Dubai leads investment preferences in UAE residents survey // Nvidia presents GR00T 2 for demonstration-trained robot tasks // Fake Cloudflare checks conceal malware within PNG images // Microsoft challenges proposed US restrictions on Chinese optical components // Google introduces specialised TPU systems with AMD processors // Panasonic Singapore Brings Back Highly Anticipated Japan Tour Lucky Draw // Helsing prepares Berlin debut for military targeting software // Google Health introduces blood pressure logs and glucose overlays // MENA startup investment tumbles without major October deals // South Korea levies unprecedented penalties on bond auction dealers // Goldman Sachs and Citi earmark $270 million for stablecoin // Hijack warning forces Air India aircraft into isolation // Servers.com widens dedicated server network with six facilities // Auto, taxi unions go on strike // Singapore introduces AI scam alerts for messaging conversations // CPM wants abandoned power deal probed // BJP complaint against Murali over Vande Mataram // New Two Way Trade Momentum Highlighted at China-Africa Cooperation Forum in Yiwu // High Court strikes down police curbs on hotel night life //