2 NovThe Daily FiveMonday

Bank of Baroda breaks its 10% tech-spend ceiling, Walmart probes Flipkart again, and a Lucknow SIM-box raid

A Mumbai bank admits an inbox breach is worth more than a decade of its own spending rules. Walmart opens its third internal probe at Flipkart in three years. And a Lucknow raid shows exactly how a 'local' police call isn't local at all.

  1. Long Press · Daily Five2 Nov 202601 / 05
    Illustration for the story: Bank of Baroda is breaking its 10% tech-spend ceiling after one compromised employee email
    securityIndia

    Bank of Baroda is breaking its 10% tech-spend ceiling after one compromised employee email

    Bank of Baroda will push its technology and cybersecurity spending past the 10% operating-profit ceiling it kept for years, after an employee email account was compromised back in July. CEO Debadatta Chand called it a 'turning point' on 2 November. The core banking systems were never touched. The inbox was. That's where most of the Indian bank breach stories now sit. Not the firewall, the person already logged in. The420 reports the bank is now running staff phishing training, tightening multi-factor sign-in to internal platforms, upgrading legacy software, and working with CERT-In alongside an external consultant. A dark-web actor had claimed a 1TB data leak earlier this year. The bank has stuck to the line that core banking systems were safe and the compromise sat at the email layer. Both can be true, and that's the uncomfortable part.

    The question

    Why is Bank of Baroda raising its cybersecurity spending in November 2026?

    In one line

    Bank of Baroda will raise technology and cybersecurity spending above its long-standing 10% operating-profit ceiling across FY2026-27 after an employee email account was compromised in July 2026. CEO Debadatta Chand called the breach a 'turning point' on 2 November 2026. Core banking systems were not touched.

    The problem

    A single employee email account was enough to force a national bank to break the 10% technology-spending ceiling it had kept for years. The breach never touched core banking systems, which means the gap was in people and permissions, not infrastructure. That is the pattern across most Indian bank incidents this year.

    What changed

    On 2 November 2026, CEO Debadatta Chand told analysts the July 2026 breach was a 'turning point' and that combined capital and operating tech outlays will cross 10% of operating profit across FY2026-27 and possibly the following year. A clearer figure is expected after December. CERT-In is involved and an external consultant is reviewing protocols.

    The catch

    No specific number has been published. The dark-web actor's 1TB leak claim is still unverified by the bank. And a one-time spending bump is not a culture change: the employee-email vector that caused this does not get solved by budgets alone.

    What it means for you

    Treat any Baroda-branded email asking you to click, verify or re-KYC as suspect until you have logged in through the official app directly. Rotate your email-login passwords and turn on hardware or app-based two-factor on anything that touches your bank. The breach was at their end; the clean-up is still partly at yours.

    Questions people ask

    How much more will Bank of Baroda spend on tech after the breach?

    The bank hasn't published a figure yet. It has said the combined capital and operating technology outlays will cross the 10% operating-profit threshold it has kept for years, across FY2026-27 and possibly the following year. A clearer number is expected after December 2026, per CEO Debadatta Chand's remarks on 2 November 2026.

    Were Bank of Baroda customer accounts affected by the breach?

    Bank of Baroda has said core banking systems were safe. An employee email account was compromised in July 2026, and separately a dark-web actor claimed a 1TB leak that the bank has not confirmed. The bank is working with CERT-In and an external consultant. Customers should still rotate email-based banking credentials and watch for phishing against the Baroda brand.

    SourcesThe420 ↗

  2. Long Press · Daily Five2 Nov 202602 / 05
    Illustration for the story: Walmart's third Flipkart probe in three years: ₹150 cr in alleged vendor kickbacks
    newsIndia

    Walmart's third Flipkart probe in three years: ₹150 cr in alleged vendor kickbacks

    Walmart is investigating Flipkart employees for allegedly taking more than ₹150 crore in vendor kickbacks, mostly routed through the B2B channel of the smartphones and LTA (luggage and travel accessories) divisions. Free Press Journal and Inc42, citing Moneycontrol, say whistleblower complaints kicked it off. Neither company has commented. The pattern is what matters: this is the third internal misconduct probe Walmart has started at Flipkart in under three years. About two-and-a-half years ago, at least three LTA employees were terminated for financial misappropriation. A ₹150 crore allegation on a platform this size is not a solved governance problem. It is one more look at a recurring one.

    The question

    What is Walmart investigating at Flipkart in November 2026?

    In one line

    Walmart is investigating Flipkart employees for allegedly taking more than ₹150 crore in vendor kickbacks, mostly routed through the business-to-business channel of the smartphones and luggage divisions. Whistleblower complaints triggered the probe. Neither Walmart nor Flipkart has commented publicly as of 1 November 2026.

    The problem

    Flipkart's B2B channel, where devices and inventory move between business units, has repeatedly surfaced as a soft spot for employee misconduct. Vendor payments can look like legitimate incentives on paper, which makes the gap between a kickback and a performance bonus easy to lose.

    What changed

    Whistleblower complaints inside Flipkart kicked off the current probe, which places alleged kickbacks at over ₹150 crore across the smartphones and LTA divisions. This is Walmart's third internal probe at Flipkart in under three years. Moneycontrol first reported the scope; Free Press Journal and Inc42 followed on 30 October and 1 November 2026.

    The catch

    The exact figure is still being established, no employees have been named, and neither Walmart nor Flipkart has made a public statement. 'More than ₹150 crore' is an allegation, not an audited finding. Internal probes do not always lead to disclosures.

    What it means for you

    If you buy phones on Flipkart's big-ticket days, this is background noise, not a reason to switch. The practical bit: when a listed price sits far below MRP, or a mystery seller shows up with the lowest price, the warranty path for that device may run through intermediaries rather than the brand's India service network. Keep the invoice and the IMEI handy.

    Questions people ask

    What exactly are Flipkart employees accused of doing?

    According to a Moneycontrol report cited by Free Press Journal and Inc42, employees in Flipkart's smartphones and LTA (luggage and travel accessories) divisions allegedly accepted payments and favours from vendors in exchange for visibility and sales. Much of the money is said to have moved through the B2B channel, with some employees taking a cut when devices moved between business units.

    Has this happened at Flipkart before?

    Yes. This is the third internal misconduct probe Walmart has initiated at Flipkart in under three years. About two and a half years ago, several LTA employees were investigated for financial misappropriation and at least three were terminated. The exact scope and timeline of the current ₹150 crore allegation is still being established.

    SourcesFree Press Journal ↗Inc42 ↗

  3. Long Press · Daily Five2 Nov 202603 / 05
    Illustration for the story: Every sensitive screenshot on your phone belongs in Google Photos Locked Folder
    tip

    Every sensitive screenshot on your phone belongs in Google Photos Locked Folder

    Every sensitive screenshot on your phone belongs in Google Photos Locked Folder. Aadhaar, PAN, cheque photos, UPI PIN reminders, OTP screenshots. Not the camera roll. In the Photos app, go to Collections or Library, then Utilities, then Locked Folder. Set a biometric unlock. Everything you move in leaves the camera roll and lives behind Face ID or a fingerprint. On-device only by default, so no cloud sync. It is not a new feature. It is just one of the most underused ones. In a year when half the Daily Five is about phishing and SIM-box fraud, keeping your identity screenshots off the main roll is the quietest two minutes you can spend.

    The question

    How do I hide sensitive photos like Aadhaar and PAN in Google Photos?

    In one line

    Open the Google Photos app, go to Collections or Library, tap Utilities, then Locked Folder, and set a biometric unlock using Face ID or fingerprint. Items moved into Locked Folder leave your camera roll, are stored on-device by default with no cloud sync, and do not appear in search or memories.

    The problem

    Most people keep screenshots of Aadhaar, PAN, cheques, OTPs and KYC documents in the regular camera roll. One shared screen, one phone handover, one app with over-generous photo permissions, and sensitive IDs leak the way most leaks actually happen: quietly, and from your own side of the glass.

    What changed

    Google Photos Locked Folder, available on Android and iOS, moves selected items off the camera roll into a biometric-locked space that does not show up in search, memories, or shared albums. On-device only by default; Android also offers an optional cloud backup for cross-device recovery.

    The catch

    Items in Locked Folder are no longer in your main album, so you have to remember to open the folder when you need them. If you factory-reset your phone and never turned on cloud backup, locally-stored items are gone. Decide the backup trade-off before you start moving things in.

    What it means for you

    Spend two minutes today: Photos app, then Collections or Library, then Utilities, then Locked Folder. Move everything with your name, number, bank account, Aadhaar or PAN on it. Keep that camera roll clean of anything you would not hand a stranger if they borrowed your phone to make a call.

    Questions people ask

    Does Google Photos Locked Folder work on iPhone and Android?

    Yes. Locked Folder is available on Android and iOS inside the Google Photos app. On both, it lives under Collections or Library, then Utilities, then Locked Folder. You need a device unlock method set up such as Face ID, Touch ID or fingerprint. On Android, Locked Folder has an optional cloud backup for cross-device access; on iOS, items stay on-device.

    What should I actually put in Locked Folder?

    Screenshots of Aadhaar and PAN cards, cheque leaves, UPI PIN reminders, OTPs, passport scans, insurance papers, and any image you do not want showing up in a shared Photos search when a friend swipes through pictures. Treat it as a nothing-sensitive-in-camera-roll rule. Takes about two minutes once.

    SourcesGoogle Photos help ↗

  4. Long Press · Daily Five2 Nov 202604 / 05
    Illustration for the story: An Indian number does not mean an Indian caller anymore
    myth busterIndia

    An Indian number does not mean an Indian caller anymore

    Lucknow police raided four apartments across Sushant Golf City, Para, BBD and Chinhat under Operation Digital Kavach. Inside, they found six 32-port SIM boxes with 192 slots total, three VPN gateways, 21 smart switches, UPS units and 18 batteries. The setup was built to route international calls through local Indian cellular lines, which is why so many digital-arrest scams this year have shown up with +91 numbers. The suspect, Saugat Asthana, had leased all four properties and is absconding, The420 reports. Two earlier arrests in Varanasi led police to him. The old intuition that a 'police inspector' calling from a +91 number must be real is now the con. The number was never the proof. The behaviour is. Any call that forbids you from telling your family is a scam, whatever ID it shows.

    The question

    Does a +91 phone number mean a digital-arrest scam call is from inside India?

    In one line

    No. On 2 November 2026, Lucknow police seized six 32-port SIM boxes with 192 slots total that were routing international scam calls through Indian cellular lines, so the +91 number on your screen says nothing about where the caller actually is. Treat any 'police' or 'customs' call that forbids you from telling family as a scam, whatever the number shows.

    The problem

    A generation of Indian phone users was trained to trust a +91 number as the signal that a caller is domestic. SIM-box networks like the Lucknow setup turn that trust against them: foreign scammers get Indian caller IDs, and 'ye to local number hai, scam nahi hoga' becomes exactly the hole the fraud exploits.

    What changed

    On 2 November 2026, Lucknow police raided four apartments and seized six 32-port SIM boxes with an aggregate 192 slots, VPN gateways and smart switches. The setup was built to route international VoIP calls through Indian SIM cards and had been feeding digital-arrest frauds across multiple states. The lead suspect is absconding; two earlier arrests in Varanasi led to the raid.

    The catch

    No arrests were made in the raid itself. The full count of digital-arrest cases this one network fed is still being traced through call records. And one hub down does not take the business model down: more SIM-box farms exist, and more will be set up as long as there is money to steal.

    What it means for you

    Pass this to anyone over 55 at home. Teach the rule once: 'Agar police kahe kisi ko mat bataana, matlab police nahi hai.' Any threat of arrest over a video call, any request to transfer money to a 'verification' account, any demand for secrecy from family means hang up. Then report the number on Sanchar Saathi's Chakshu portal, and dial 1930 if any money has moved.

    Questions people ask

    What is a SIM box and how does a digital-arrest scam use it?

    A SIM box is a device that routes voice-over-IP calls from abroad through local SIM cards, so a call that originates overseas arrives on your phone with a local caller ID. In the Lucknow network, 192 SIM slots across six boxes carried international VoIP traffic to victims who then saw +91 numbers and believed the 'policeman' or 'customs officer' was calling from India.

    What should you do if you get a 'police' call that threatens arrest?

    Hang up. Do not switch to video. Any genuine Indian police investigation does not demand video calls, bank transfers or secrecy from family. Report the number on the Sanchar Saathi Chakshu portal or app. If any money has moved, call 1930 immediately and file a complaint at cybercrime.gov.in. Secrecy is the con; a request to not tell anyone is the tell.

    SourcesThe420 ↗

  5. Long Press · Daily Five2 Nov 202605 / 05
    Illustration for the story: Apple's new CEO defends 'no AI for AI's sake' after Siri's delayed launch
    hot take

    Apple's new CEO defends 'no AI for AI's sake' after Siri's delayed launch

    John Ternus, who became Apple CEO in September 2026, gave his first big AI interview to Wired. The money quote: 'We don't want to ship AI for AI's sake.' He added, 'I really like where we're at.' The context matters. The delayed Siri rebuild, the one supposed to arrive a year earlier, launched this past summer. So the 'AI for AI's sake' line is landing after Apple already shipped the thing it took forever to ship, TechCrunch reports. Inside the company, the posture is different. In staff meetings Cook, and now Ternus, have described AI as 'ours to grab' and as 'bigger than the internet.' That is not the vocabulary of a company that thinks it is on time. 'No AI for AI's sake' reads as a reasonable philosophy when you are ahead. When you are behind, it reads as a defense.

    The question

    What did Apple's new CEO John Ternus say about AI in his Wired interview?

    In one line

    In a Wired interview published on 31 October 2026, John Ternus, who became Apple CEO in September 2026, said: 'We don't want to ship AI for AI's sake' and 'I really like where we're at.' The remarks landed months after Apple finally launched the delayed, more capable Siri rebuild that was originally promised a year earlier.

    The problem

    Apple is the only one of the big consumer-tech platforms whose AI story is still a story. Google has Gemini in Chrome and Workspace, Microsoft has Copilot across Office and Windows, Amazon has rebuilt Alexa. Apple spent a year promising a Siri that only arrived in summer 2026.

    What changed

    In a Wired interview published 31 October 2026, John Ternus said Apple will 'absolutely leverage AI' in future products but 'won't ship AI for AI's sake,' and that he 'really likes where we're at.' Separately, in staff meetings Cook has said AI will be bigger than the internet and that Apple will invest and acquire to catch up.

    The catch

    The two messages do not quite fit. Externally, calm restraint; internally, urgency and 'ours to grab.' Both can be true for a quarter. They cannot both be true for a product generation. The quote also comes after Apple already shipped the delayed Siri, which weakens the 'we're taking our time' framing.

    What it means for you

    If you are on an iPhone and Siri still feels dumb for anything beyond timers, do not rush to switch devices. The quieter upgrade path is to use Gemini or ChatGPT inside their own apps for the hard questions and leave Siri for device commands. Watch what Apple ships at WWDC 2027: that is when the 'we really like where we're at' line is either confirmed or quietly dropped.

    Questions people ask

    Is Apple actually behind on AI compared with Google, Microsoft and OpenAI?

    On consumer AI features, yes. Google, Microsoft and Amazon rolled out large-language-model assistants and in-product AI across their main services in 2024 and 2025. Apple's rebuilt Siri slipped by about a year and only shipped in summer 2026. Apple's own leadership has told staff AI is now the company's top priority, which is not the posture of a company that was on time.

    Does 'we don't want to ship AI for AI's sake' mean Apple will skip the AI wave?

    No. The same interview says Apple will 'absolutely leverage AI' in future products, and internal messaging describes AI as 'ours to grab' with planned acquisitions and R&D investment. The quote is a framing choice: Apple wants to be judged on finished product polish rather than on how early a feature shipped. Whether that holds depends on what ships next, not on what gets said.

    SourcesTechCrunch ↗

Taps

Quick hits. One line each, for when a long press is too much.

  • India

    Jamshedpur police arrest SIM supplier; nine phone-shop vendors under cybercrime probe

    Vendors allegedly ran unverified SIMs to scam networks. If someone activated a SIM in your name, Sanchar Saathi's Know Your Mobile Connections lets you flag it.

    The420 ↗
  • India

    ED arrests Armstrong Exchange founder Sagar Dash in online betting case

    Alleges hundreds of crores routed through mule accounts and fake KYC on a Bengaluru cooperative crypto account. ₹9 cr frozen; Edsom Fintech CEO also arrested, per Inc42.

    Inc42 ↗
  • India

    Netflix India revenue up 18% as it bets on Lock Upp, Roadies and regional

    Reality shows and TV franchises are the new growth engine. Netflix now holds 57% share of major Hindi theatrical catalogues, per Ormax via Inc42. One strong quarter, not a win yet.

    Inc42 ↗
  • Global

    Nvidia weighs cosigning Nscale's West Virginia AI data-centre loans

    First building holds a $44.6 billion Anthropic contract. Chipmaker underwriting its own customers' debt is the new normal of the AI capex cycle.

    TechCrunch ↗
  • Global

    Salesforce reportedly buys defence-tech startup Rune for about $375 million

    Latest in a run of acquisitions as Salesforce stacks vertical AI plays. US defence focus for now.

    TechCrunch ↗
That's all five. Next edition tomorrow.Press and hold