India’s cybersecurity agency

Attackers are exploiting payment APIs to steal funds, with some financial firms targeted again despite earlier security fixes.