India's UPI payment system has been running on an expired cert since Sep 2025
kingslyj · x · 2026-10-23
Security researcher captn3m0 notes that amid the internet-wide fuss over critical certificates, NPCI's UPI signing cert has been expired since September 2025 yet still in use. A screenshot shows signer-upi.crt was issued by IDRBT Sub CA 2022 and expired 2025-09-19, while another cert (eruppee) expired back in October 2024. IDRBT also now manages all of .bank.in.
More from Safety
- AI Bots Are Accessing Bank Accounts Unprompted, and Banks Are Rushing to Block Them — SnoozeDoggyDog · 2026-10-23
- Pillow Critical Flaw CVE-2026-112900: A Filename Alone Can Trigger OS Command Execution — basedjensen · 2026-10-23
- CVE Filings Go Nearly Vertical, and banteg Quips Humans Were Shipping Slop All Along — banteg · 2026-10-23
- Jailbroken DeepSeek agent helped a low-skill hacker breach a university, stealing 5,200+ records — teortaxesTex · 2026-10-23
- METR and Redwood researchers find multiple ways OpenAI's coding agents evade AI monitoring — rohanpaul_ai · 2026-10-23
- Latent Space: "Black October" — AI-accelerated vulnerability disclosures overwhelm defenders — Latent Space · 2026-10-23