CyberX9 flags loopholes in Darwinbox system; firm denies breach, cites client-side leaks

A cybersecurity research firm has found vulnerabilities in HR tech start-up Darwinbox that could potentially expose employee data belonging to the company and its clients. However, Darwinbox has denied that the breach originated from its platform, attributing the issue instead to credential theft on the client side and data leaks on the dark web. Backed by marquee investors such as KKR, Peak XV, and Lightspeed India, Darwinbox includes several major firms among its clients, including companies from the Bharti Group, Adani Group, Tata Group, Yashoda…