5 NovThe Daily FiveThursday

CERT-In names the AI bank fraud, and Apple's new 18+ label skips India

CERT-In puts a name to the AI attacks hitting Indian banks, Apple's new App Store age rating has a hole big enough to walk a teenager through in India, and Nothing teases a screenless gadget nobody can picture yet.

  1. Long Press · Daily Five5 Nov 202601 / 05
    Illustration for the story: CERT-In Names the Bank Attackers
    securityIndia

    CERT-In Names the Bank Attackers

    CERT-In has a name now for the AI-driven attacks hitting Indian banks and fintechs: CRAFTY FALCON. The campaign uses tools like ARTEX, PentAGI and CyberStrikeAI, originally built for legitimate security testing, to hunt for weak payment APIs and misconfigured servers. The pattern repeats: a Re 1 test transfer to see if it slips through, then real money moving through mule accounts before anyone notices. It even times its biggest moves for weekends and holidays, when monitoring thins out. None of this is conceptually new. What's new is the speed. Turn transaction alerts on, and if you see a tiny test debit you didn't make, don't wait to report it.

    The question

    What is CRAFTY FALCON, the AI cyberattack CERT-In flagged on Indian banks?

    In one line

    CRAFTY FALCON is the name CERT-In gave on November 4, 2026 to an ongoing AI-assisted campaign exploiting payment APIs at Indian banks, NBFCs, fintechs and crypto exchanges. Attackers test a weak API with a Re 1 transfer, then move real money through mule accounts via IMPS and NEFT.

    The problem

    Indian banks, NBFCs and fintechs are facing a wave of intrusions that move at machine speed, exploiting exposed payment APIs and automated fund-disbursement systems faster than manual monitoring usually catches.

    What changed

    On November 4, 2026, CERT-In and the I4C named the campaign CRAFTY FALCON and issued critical-severity guidance, CIAD-2026-0046 and CIAD-2026-0049, describing how AI-assisted tools probe for vulnerabilities, run small test transactions, and route stolen funds through mule accounts via IMPS and NEFT before deleting records to cover their tracks, The 420.in reported.

    The catch

    The advisory doesn't name every affected institution or put a number on total losses, and it notes these AI tools have legitimate security uses too, so not every intrusion was necessarily fully autonomous.

    What it means for you

    Turn on transaction alerts, treat a tiny unexplained test payment as a warning sign rather than a glitch, and report any unauthorised debit to your bank and to 1930 immediately rather than waiting to see if more follow.

    Questions people ask

    What should banks do about the CRAFTY FALCON advisory?

    CERT-In's advisories CIAD-2026-0046 and CIAD-2026-0049 tell banks to set daily transfer limits, verify beneficiaries, flag unusually fast transactions, separate test environments from live systems, and run heightened monitoring on weekends and holidays, when the campaign strikes most often.

    What should a bank customer do if this affects them?

    Turn on transaction alerts so you see every debit immediately, and if you spot an unauthorised transfer, report it to your bank and to the national cybercrime helpline at 1930 right away, since mule-account withdrawals move fast.

    Is every bank fraud case linked to CRAFTY FALCON?

    No. CERT-In's advisory does not name every affected institution or give a total amount stolen, so recent banking fraud losses should not be attributed to this specific campaign without further evidence from investigators.

  2. Long Press · Daily Five5 Nov 202602 / 05
    Illustration for the story: Apple's 18+ Label Isn't Enforced
    newsIndia

    Apple's 18+ Label Isn't Enforced

    Apple is giving the App Store new 13+, 16+ and 18+ ratings, and starting November 16, developers of dating apps and romantic AI companions have to apply them. Good in theory. In practice, the age that decides who can download these apps is whatever birthdate someone typed in once, and India isn't one of the countries where Apple actually blocks an unconfirmed 18+ download. A 16-year-old with a fake birth year gets the same access as before. The label changed. The gate didn't.

    The question

    Does Apple verify age for its new 18+ dating app rating in India?

    In one line

    No. Apple's new 18+ rating for dating and AI companion apps, which developers must apply by November 16, 2026, relies on a self-entered birthdate. India isn't among the countries, like Brazil, Australia and Singapore, where 18+ downloads are actually blocked until age is confirmed.

    The problem

    Dating apps and AI companion apps with sexual or romantic content are reaching minors in India, and the App Store's age system has no real check behind it in this market.

    What changed

    Apple told developers in early November 2026 that any app with dating or romantic relationship features, including AI companions like Character.AI and Replika, must carry an 18+ rating by November 16, building on its broader age-rating overhaul, MediaNama reported.

    The catch

    The 18+ label only reflects a self-entered birthdate. Apple blocks unconfirmed 18+ downloads in Brazil, Australia and Singapore, but India isn't on that list, so the new rating changes what's listed, not who can actually download it here.

    What it means for you

    If a child in your house has an iPhone, the App Store's new 18+ tag won't stop them on its own. Check Screen Time under Settings, set Content & Privacy Restrictions, and cap app ratings there instead of relying on Apple's label.

    Questions people ask

    What apps need Apple's new 18+ rating?

    Dating apps, and AI companion apps such as Character.AI and Replika where romantic or sexual roleplay is one of the features, now need an 18+ rating under Apple's updated App Store policy announced in early November 2026.

    How does Apple decide who is old enough to download these apps?

    It checks the birthdate tied to a user's Apple ID, entered once at account setup. There's no government-ID check or ongoing verification in most markets, so a user who typed in a false birth year keeps that age permanently.

    Could India get the same download block as Brazil or Australia?

    Apple hasn't announced plans to extend the 18+ download block to India. Indian matrimonial sites have required ID verification since 2016, showing a working model already exists, but Apple's new rule doesn't draw on it.

    SourcesMediaNama ↗The AI Insider ↗

  3. Long Press · Daily Five5 Nov 202603 / 05
    Illustration for the story: Stop Scrolling Netflix Home
    tip

    Stop Scrolling Netflix Home

    Netflix quietly added a tab called My Netflix to its mobile app, and most people still haven't switched over to using it. It's a single screen built around what you actually need in the moment: your resume list, your downloads, reminders you set for upcoming releases, and trailers you've already watched. Instead of scrolling Home hunting for that show you were three episodes into, tap My Netflix at the bottom of the app and it's right there.

    The question

    What is the My Netflix tab and how do I use it?

    In one line

    My Netflix is a tab in the Netflix mobile app that collects your saved titles, resume list, downloads, reminders for upcoming shows and previously watched trailers in one screen. Tap it at the bottom of the app instead of scrolling through Home to find what you were watching.

    The problem

    Netflix's Home tab buries what you're actually looking for under a wall of recommendations, so finding the show you were midway through, or a download you saved for a flight, means scrolling.

    What changed

    Netflix rolled out a dedicated My Netflix tab in its mobile app, consolidating your saved titles, resume-watching list, downloads, upcoming-release reminders and previously watched trailers into one screen, accessible with a single tap at the bottom of the app, Trusted Reviews reported.

    The catch

    The rollout started on iOS with Android following, so depending on your app version it may sit under a slightly different label; if you don't see it, an app update usually brings it.

    What it means for you

    Open the Netflix app, look for My Netflix in the bottom bar, and use it instead of Home the next time you just want to resume something or check what you downloaded.

    Questions people ask

    Is the My Netflix tab available in India?

    Netflix rolled the tab out on iOS first in 2026 with Android following soon after, as part of a broader app redesign, so it should be live on recent app versions in India; update the app if you don't see it yet.

    What's the difference between My Netflix and the Home tab?

    Home still shows Netflix's full recommendation catalogue for browsing something new. My Netflix skips that entirely and surfaces only what's personally relevant to you: what you're mid-episode on, your downloads and your reminders.

    SourcesTrusted Reviews ↗

  4. Long Press · Daily Five5 Nov 202604 / 05
    Illustration for the story: Nothing's Device Isn't a Phone
    hot take

    Nothing's Device Isn't a Phone

    Carl Pei says Nothing's first AI-native product ships in December. That's the whole announcement: no screen, not an app, a tool with Nothing's usual design sensibility. He's deliberately not calling it a wearable, dodging the pendant-pin-glasses category every other AI hardware company is chasing as their iPhone moment. Smart positioning. The actual problem screenless AI gadgets keep running into isn't marketing, though, it's that the AI underneath still isn't reliable enough to run a device with no screen to fall back on. A teaser this thin buys hype, not proof.

    The question

    What is Nothing's new AI-native device that Carl Pei teased?

    In one line

    Nothing CEO Carl Pei said on X on November 4, 2026 that the company's first AI-native product ships in December. He described it as a tool with no new screen, said it couldn't have been an app, and gave no further details on price or form factor.

    The problem

    AI hardware makers keep promising screenless, voice-or-sensor-driven devices as the next big category, but most of these products have struggled once real use revealed how often the underlying AI gets things wrong with no screen to show you what happened.

    What changed

    Nothing CEO Carl Pei posted on X on November 4, 2026 that the company's first AI-native product, which he called a tool rather than a gadget, ships in December with no new screen and wasn't built as an app, according to TechCrunch.

    The catch

    There's no price, no spec sheet and no confirmed exact release date beyond December. Nothing has previously talked about AI smart glasses and earbuds too, and it's unclear whether this product is related to either.

    What it means for you

    If you're tempted to wait for it, wait for the actual hands-on reviews in December before assuming a screenless AI gadget will replace anything in your current setup.

    Questions people ask

    Is Nothing's new AI device a phone?

    No. Pei specifically said it has no new screen, which rules out a phone or tablet-style display device, and he's also avoided grouping it with wearables like AI pendants, pins or glasses that other companies are building.

    When will Nothing's AI-native device actually launch?

    Pei's post points to December 2026, but Nothing hasn't confirmed an exact date, price or specifications yet. Outlets covering the teaser note no firm release date has been officially announced beyond that month.

    SourcesTechCrunch ↗

  5. Long Press · Daily Five5 Nov 202605 / 05
    Illustration for the story: Turning Off Gemini Changes Nothing
    myth buster

    Turning Off Gemini Changes Nothing

    Google is telling schools they can switch Gemini off for students, which sounds like a real choice until you read the fine print. Search itself has no version without AI Overviews and AI Mode baked in, so a school that wants AI out of Search loses Search altogether. Common Sense Media already tested Google's AI Search tools and handed them its lowest safety rating, flagging how often the system missed serious warning signs it should have caught. An opt-out that takes the whole product down with it isn't really an opt-out. It's a setting dressed up as a choice.

    The question

    Can schools really turn off Google's Gemini AI for students?

    In one line

    Partially. Google says Gemini, Gemini Notebook and Search are off by default for K-12 student accounts until administrators turn them on, with controls taking effect in early 2027. But Search itself has no version without AI Overviews and AI Mode, so schools can't accept Search while rejecting the AI inside it.

    The problem

    Schools using Google Workspace for Education want the ability to keep useful tools like Search while keeping unvetted AI features away from students, but Google has bundled the two together.

    What changed

    Google confirmed that Gemini, Gemini Notebook and Search will be off by default for K-12 student accounts starting in early 2027 until administrators enable them, but MediaNama noted that Google offers no way to keep Search while removing its built-in AI Overviews and AI Mode.

    The catch

    Common Sense Media rated the AI Search features Unacceptable Risk after testing found gaps in how they handled sensitive queries; Google has said its tests were narrow and hard to reproduce.

    What it means for you

    If your child's school uses Google services, ask explicitly how AI Overviews and AI Mode are configured in Search, since turning off Gemini alone won't remove AI from the search results students see.

    Questions people ask

    What happens if a school refuses to turn AI Search on for students?

    Students lose access to Google Search entirely. Google offers no non-AI version of Search, so schools that want AI Overviews and AI Mode off have to give up the core search product along with it.

    What do child-safety groups say about Google's AI in schools?

    Common Sense Media rated Google's AI Search features its lowest grade, Unacceptable Risk, after testing found AI Mode completed assignments it shouldn't have and AI Overview missed a notable share of explicit self-harm references, reporting Google disputes as too narrow.

    SourcesMediaNama ↗

Taps

Quick hits. One line each, for when a long press is too much.

  • India

    Jio Platforms posts first results since its IPO: profit up 14%

    Q2 FY27 revenue hit Rs 47,485 crore and the company crossed 300 million 5G subscribers, days after its record IPO listing. MediaNama

    MediaNama ↗
  • India

    TRAI lets telecom AI agents handle complaints, humans still required

    Call centres can mix bots and staff, but a human must be available at least 16 hours a day under TRAI's new rule. MediaNama

    MediaNama ↗
  • India

    Delhi HC: LinkedIn account bans can't be challenged by writ petition

    A user whose profile was restricted without explanation was told to file a civil suit instead, since LinkedIn performs no public function. MediaNama

    MediaNama ↗
  • Global

    Gemini 4 Carbon ties Claude on a hard new benchmark

    SemiAnalysis's GDPx test puts Claude Opus 5.5 narrowly on top, but Gemini 4 Carbon costs about a third as much per task. 9to5Google

    9to5Google ↗
  • Global

    Waymo is ending its Uber exclusivity in two US cities

    Austin and Atlanta riders will see Waymo's own app launch alongside Uber's starting January 2028, as the robotaxi rivalry sharpens. TheNextWeb

    TheNextWeb ↗
That's all five. Next edition tomorrow.Press and hold