#FactCheck-Old Photo of Kareena Kapoor Khan Falsely Shared as Fresh Pregnancy Claim
Executive Summary
A photo of Bollywood actress Kareena Kapoor Khan is being widely shared on social media with the claim that she is pregnant again. In the viral image, Kareena appears with a visible baby bump, leading users to speculate about another pregnancy. However, research by the CyberPeace Research Wing found the claim to be misleading. The research revealed that the image is not recent and is actually from 2020, now being reshared with a false narrative.
Claim:
An Instagram user shared the viral image on April 18, 2026, and posted a caption jokingly suggesting that after Taimur and Jehangir, Kareena was expecting more children.
Fact Check:
To verify the claim, relevant keyword searches were conducted online, but no credible media report was found supporting the claim that Kareena Kapoor Khan is currently pregnant. A reverse search of the viral visual led to an older video uploaded on the YouTube channel Bol Bollywood on December 7, 2020, where the same image was used.
Further research also found a similar video report on the YouTube channel Bollywood Bluff, published on December 8, 2020, featuring the same visual and similar claims. These findings confirmed that the viral image is several years old and unrelated to any recent development.
Conclusion:
The claim that Kareena Kapoor Khan is pregnant again is misleading. The viral photo is not recent but an old image from 2020 that is being circulated with a false claim.
Related Blogs
Introduction
In today’s digital age, everyone is online, so is the healthcare sector worldwide. The latest victim of a data breach is Hong Kong healthcare provider OT&P Healthcare, which has recently suffered a data loss of 100,000 patients that exposed their medical history, and caused concern to the patients and their families. This breach has highlighted the vulnerability in the healthcare sector /industry and the importance of cybersecurity measures to protect sensitive information. This blog will explore the data breach, its impact on patients and families, and the best practices for safeguarding sensitive data.
Background: On 13 March 2023, an incident took place where the Cybercriminals deployed a variety of methods to breach the data, which included phishing attacks, malware, and exploiting software vulnerabilities. OT&P Health Care exploits the sensitive data of the patients. According to OT&P Healthcare, it is working together with law enforcement and has hired a cybersecurity firm to investigate the incident and tighten its security procedures. Like other data breaches, the inquiry will most certainly take some time to uncover the actual source and scope of the intrusion. Regardless of the cause of the breach, this event emphasises the significance of frequent cybersecurity assessments, vulnerability testing, and proactive data protection measures. Considering the dangers in the healthcare sector must be cautious in preserving the personal and medical records of the patients as they are sensitive in nature.
Is confidentiality at stake due to data breaches?
Medical data breaches represent a huge danger to patients, with serious ramifications for their privacy, financial security, and physical health. Some of the potential hazards and effects of medical data breaches are as follows:
- Compromise of patient data: Medical data breaches can expose patients’ sensitive information, such as their medical history, diagnoses, treatment, and medication regimens. If history is highly personal and reaches the wrong hands, it could harm someone’s reputation.
- Identity theft: the data stolen by the cybercriminals may be used by them to open credit accounts and apply for loans, Patients can suffer severe financial and psychological stress because of identity theft since they may spend years attempting to rebuild their credit and regain their good name.
- Medical Fraud: Medical data breaches can also result in medical fraud, which occurs when hackers use stolen medical information to charge insurance companies for services that were not performed or for bogus treatments or procedures. Medical fraud may result in financial losses for patients, insurance companies, and individuals obtaining ineffective or risky medical care.
Impact on patients
Data breach does not cause financial loss but may also profoundly impact their mental health and emotional well-being. let’s understand some psychological impacts:
- Anxiety and Stress: Patients whose medical data has been affected may experience feelings of stress and anxiety as they worry about the potential consequences of the data loss can be misused.
- Loss of faith: Patients may lose faith in their healthcare providers if they believe their personal and medical information needs to be properly As a result, patients may be reluctant to disclose sensitive information to their healthcare professionals, compromising the quality of their medical care.
- Sense of Embarrassment: Patients may feel disregarded or ashamed if their sensitive medical information is revealed, particularly if it relates to a sensitive or stigmatised This might lead to social isolation and a reluctance to seek further medical treatment.
- Post-Traumatic Stress Disorder (PTSD): Patients who have experienced a data breach may have PTSD symptoms such as nightmares, flashbacks, and avoidance behaviour. This can have long-term consequences for their mental health and quality of life.
Legal Implications of Data Breach
Patients have certain legal rights and compensations when a healthcare data breach occurs. Let’s have a look at them: –
- Legal Liability: Healthcare providers have a legal obligation to protect data under various privacy and security laws if they fail to take appropriate measures to protect patient data, they may be held legally liable for resulting harm.
- Legal recourse: Patients whose healthcare data leak has impacted them have the legal right to seek compensation and hold healthcare providers and organisations This could involve suing the healthcare practitioner or organisationresponsible for the breach.
- Right to seek compensation: the patients who have suffered from the data loss are liable to seek compensation.
- Notifications: As soon as a data breach takes place, it impacts the organisation and its customers. In this case, it is the responsibility of the OT&P to
- notify their patients about the data breach and inform them about the consequences.
- Take Away from OT &P Healthcare Data Breach: with the growing data breaches in the healthcare industry, here are some lessons that can be learned from the Hong Kong data breach.
- Cybersecurity: The OT&P Healthcare data breach points to the vital need to prioritisecybersecurity in healthcare. To secure themselves, hospitals and the healthcare sector must use the latest software to protect their data.
- Regular risk assessments: These assessments help find system vulnerabilities and security issues. This can assist healthcare providers and organisationsin taking the necessary actions to avoid data breaches and boost their cybersecurity defences.
- Staff Training: Healthcare workers should be taught cybersecurity best practices, such as detecting and responding to phishing attempts, handling sensitive data, and reporting suspected security breaches. This training should be continued to keep workers updated on the newest cybersecurity trends and threats.
- Incident Response Strategy: Healthcare providers and organisations should have an incident response policy in place to deal with data breaches and other security concerns. This strategy should include protocols for reporting instances, limiting the breach, and alerting patients and verified authorities.
Conclusion
The recent data breach in Hong Kong healthcare impact not only the patients but also their trust is shaken. As we continue to rely on digital technology for medical records and healthcare delivery, it is essential that healthcare providers and organisations take proactive steps to protect patient data from cyber-attacks and data breaches.
References
Executive Summary:
Recently PAN-OS software of Palo Alto Networks was discovered with the critical vulnerability CVE-2024-3400. It is the software used to power all their networks in the next generation firewalls. This vulnerability is a common injection vulnerability which provides access to unauthenticated attackers to execute random code having root privileges on the attacked system. This has been exploited actively by threat actors, leaving many organizations at risk for severe cyberattacks. This report helps to understand the exploitation, detection, mitigations and recommendations for this vulnerability.
Understanding The CVE-2024-3400 Vulnerability:
CVE-2024-3400 impacts the particular version of PAN-OS and a certain configuration susceptible to this kind of a security issue. It is a command injection, which exists in the GlobalProtect module of the PAN-OS software. The vulnerability can be exploited by an unauthorized user to run any code on the firewall having root privileges. This targets Active Directory database (ntds.dit), important data (DPAPI), and Windows event logs (Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx) and also login data, cookies, and local state data for Chrome and Microsoft Edge from specific targets leading attackers to capture the browser master key and steal sensitive information of the organization.
The CVE-2024-3400 has been provided with a critical severity rating of 10.0. The following two weaknesses make this CVE highly severe:
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-20: Improper Input Validation.
Impacted Products:
The affected version of PAN-OS by CVE-2024-3400 are-
Only the versions 10.2, 11.0, and 11.1, setup with GlobalProtect Gateway or GlobalProtect Portal are exploited by this vulnerability. Whereas the Cloud NGFW, Panorama appliances and Prisma Access are not affected.
Detecting Potential Exploitation:
Palo Alto Networks has confirmed that they are aware of the exploitation of this particular vulnerability by threat actors. In a recent publication they have given acknowledgement to Volexity for identifying the vulnerability. There is an increasing number of organizations that face severe and immediate risk by this exploitation. Third parties also have released the proof of concept for the vulnerability.
The suggestions were provided by Palo Alto Networks to detect this critical vulnerability. To detect this vulnerability, the following command shall be run on the command-line interface of PAN-OS device:
grep pattern "failed to unmarshal session(.\+.\/" mp-log gpsvc.log*
This command looks through device logs for specific entries related to vulnerability.
These log entries should contain a long, random-looking code called a GUID (Globally Unique Identifier) between the words "session(" and ")". If an attacker has tried to exploit the vulnerability, this section might contain a file path or malicious code instead of a GUID.
Presence of such entries in your logs, could be a sign of a potential attack to hack your device which may look like:
- failed to unmarshal session(../../some/path)
A normal, harmless log entry would look like this:
- failed to unmarshal session(01234567-89ab-cdef-1234-567890abcdef)
Further investigations and actions shall be needed to secure the system in case the GUID entries were not found and suspicious.
Mitigation and Recommendations:
Mitigation of the risks posed by the critical CVE-2024-3400 vulnerability, can be accomplished by the following recommended steps:
- Immediately update Software: This vulnerability is fixed in software releases namely PAN-OS 10.2.9-h1, PAN-OS 11.0.4-h1, PAN-OS 11.1.2-h3, and all higher versions. Updating software to these versions will protect your systems fully against potential exploitation.
- Leverage Hotfixes: Palo Alto Networks has released hotfixes for commonly deployed maintenance releases of PAN-OS 10.2, 11.0, and 11.1 for the users who cannot upgrade to the latest versions immediately. These hotfixes do provide a temporary solution while you prepare for the full upgrade.
- Enable Threat Prevention: Incase of available Threat Prevention subscription, enable Threat IDs 95187, 95189, and 95191 to block attacks targeting the CVE-2024-3400 vulnerability. These Threat IDs are available in Applications and Threats content version 8836-8695 and later.
- Apply Vulnerability Protection: Ensure that vulnerability protection has been applied in the GlobalProtect interface to prevent the exploitation on the device. It can be implemented using these instructions.
- Monitor Advisory Updates: Regularly checking for the updates to the official advisory of Palo Alto Networks. This helps to stay up to date of the new releases of the guidance and threat prevention IDs of CVE-2024-3400.
- Disable Device Telemetry – Optional: It is suggested to disable the device telemetry as an additional precautionary measure.
- Remediation: If there is an active exploitation observed, follow the steps mentioned in this Knowledge Base article by Palo Alto Networks.
Implementation of the above mitigation measures and recommendations would be in a position to greatly reduce the risk of exploitation you might face from a cyber attack targeting the CVE-2024-3400 vulnerability in Palo Alto Networks' PAN-OS software.
Conclusion:
The immediate response should be taken against the offensive use of the critical CVE-2024-3400 vulnerability found in the PAN-OS platform of Palo Alto Networks. Organizations should actively respond by implementing the suggested mitigation measures such as upgrading to the patched versions, enabling threat prevention and applying vulnerability protection to immediately protect from this vulnerability. Regular monitoring, implementing security defense mechanisms and security audits are the necessary measures that help to combat emerging threats and save critical resources.
Introduction
Parliament is about to begin its Monsoon Session from July 20, 2026 to August 13, 2026, and the mood in Delhi already feels charged. Ahead of the opening bell, the government has flagged five new bills for introduction, alongside a couple of pending pieces of legislation it may take up for passage. Predictably, the political oxygen in the run-up has gone almost entirely to what isn't on that list — reports this week noted the conspicuous absence of the long-anticipated Delimitation Bill and a Constitutional amendment for women's reservation in the Lok Sabha, a gap that has already drawn sharp reactions from Congress leaders. What is on the list has generated its own share of noise: a Foreign Contribution (Regulation) Amendment Bill that NGOs are watching warily, a Prevention of Insults to National Honour (Amendment) Bill tied to safeguards for the National Flag and Anthem, and a Supreme Court (Number of Judges) Amendment Bill proposing to raise the Court's sanctioned strength from 33 to 37. Every one of these will command its share of prime-time debate. But tucked quietly among the five is a bill that, headline for headline, may end up mattering more to the everyday Indian economy than all the others combined: the Micro, Small and Medium Enterprises Development (Amendment) Bill, 2026.
MSMEs play a foundational role in India’s economic engine, powering employment, entrepreneurship and growth across the country. That makes this Bill one worth watching closely, because even seemingly technical changes to the MSME framework could have very real consequences for millions of businesses and the people whose livelihoods depend on them.
What the Bill Actually Does
The MSME sector hasn't seen a structural legal update since the original MSMED Act of 2006 nearly two decades in an economy that looks nothing like it did back then. The new amendment is designed to close that gap. According to the government's own description of the bill, it aims to align the 2006 law with the sector's changed realities, improve ease of doing business, and shift toward what officials are calling "trust-based" regulation rather than a purely compliance-driven approach.
Three provisions stand out.
- First, it strengthens the mechanism for resolving delayed payments to micro and small enterprises, arguably the single biggest complaint MSME owners have voiced for years.
- Second, it creates a pathway to enforce arbitral awards specifically for micro and small units, giving smaller suppliers real teeth when a dispute is decided in their favor.
- Third, it gives states more flexibility in deciding the composition of Micro and Small Enterprises Facilitation Councils (MSEFCs) , the bodies that adjudicate payment disputes which should allow more councils to be formed and cut down on case backlogs.
The Delayed Payment Crisis, in Numbers
To understand why this matters, look at the scale of the problem the bill is trying to fix. The MSME Ministry's Samadhaan portal, which lets small enterprises file delayed-payment complaints online, had received close to 2.57 lakh applications as of June 2026, involving claimed dues of roughly ₹55,244 crore. Of these, only about 58,000 cases had actually been resolved by facilitation councils. That's a resolution rate that leaves the vast majority of small businesses waiting often for money already owed to them for goods or services delivered.
The government did tighten the screws somewhat in 2024 through Section 43B(h) of the Income Tax Act, which denies large buyers a tax deduction if they don't pay MSME suppliers within the 15-to-45-day window mandated by law. Enforcement, however, has remained patchy, and industry bodies like Assocham have continued to flag delayed payments including from PSUs and government departments as a core source of financial stress for small firms, with high interest charges on overdue statutory dues compounding the problem.
Why This Is Bigger Than One Bill
A regulation targeting the payments practices of India's micro, small, and medium-sized enterprises is more than just paperwork and procedural wrangling; the stakes for the Indian economy and society are enormous. According to the 2025-26 Economic Survey, MSMEs now contribute about 31.1% of India’s GDP, 35.4% of its manufacturing output, and 48.58% of its exports, while employing 33 to 39 crore people and providing India’s second largest source of employment after agriculture. The official Udyam database of MSMEs crossed the 8.7 crore mark by June 2026, underscoring a clear trend towards the sector’s formalisation in the last few years. Access to finance is the second pillar of MSME empowerment. The Credit Guarantee Fund Trust for Micro and Small Enterprises has authorised several lakh crores in guarantees, and most recently, the government increased its loan guarantee cover ceiling from Rs 5 crore to Rs 10 crore to facilitate more collateral-free loans to businesses. However, the actual credit gap remains estimated in the tens of lakh crores, with the biggest gaps faced by women-led and medium enterprises. While the MSME Bill doesn’t directly address access to finance, improved and quicker payment settlement mechanisms are expected to relieve some working-capital stress and dissuade small firms from falling into expensive informal credit markets. The MSME Bill also adds to a wave of recent measures to de-regulate smaller enterprises, such as the Jan Vishwas (Amendment of Provisions) Bill that was passed earlier in 2026. That Bill modified or deleted criminal offences with a more lenient civil equivalent across numerous central acts, a change industry lobby FISME called a significant move towards ease of doing business.
The Data Protection Clock Is Already Ticking - The Gap Payment Reform Won't Close
It's also worth noting that India's Digital Personal Data Protection (DPDP) Act, 2023 is now in force, with rules notified in November 2025 and full compliance — including breach notification, security safeguards. With nearly half of Indian small businesses already reporting cyber incidents each year, MSMEs have a narrowing runway to build the security practices this regime will expect of them. Given that scale of exposure, there's a real case for the MSME Amendment Bill, or a companion policy, to go further — mandating baseline cyber-hygiene standards for Udyam-registered firms or tying credit-guarantee schemes to demonstrated security practices. Payment reform alone protects an MSME's right to be paid; it does little to protect what happens to that money, or that data, once it arrives.Payment reform alone protects an MSME's right to be paid; it does little to protect what happens to that money, or that data, once it arrives. CyberPeace calls on relevant agencies to issue clearer advisories and introduce additional, cost-friendly cybersecurity safeguards tailored to MSMEs' limited budgets and IT capacity.
What to Watch For
Whether the MSME Bill gets the attention it deserves during this session is an open question. With the Opposition expected to spend political capital on delimitation, the Vande Mataram bill, unemployment, inflation, and the NEET paper-leak controversy, a technical amendment to an enterprise development law is unlikely to dominate floor debate even though it may end up affecting more households than any single headline bill this session.
Conclusion
For India's roughly 7-8 crore MSMEs, most of them family-run and thinly capitalised, the details that get finalised in the coming weeks how MSEFCs are reconstituted, how arbitral awards get enforced, how "trust-based" regulation is actually defined will matter far more than who wins the argument over delimitation. It's worth watching this one closely, even if the cameras are pointed elsewhere.
Sources
- https://www.business-standard.com/india-news/vande-mataram-bill-among-five-new-legislations-listed-for-monsoon-session-126071601319_1.html
- https://www.prokerala.com/news/articles/a1780267.html
