Table of Contents
- Emissions Gap Report 2026: 1.5°C Breach Now Unavoidable (GS 3 – Environment)
- PHP2Shell: The Flaw That Forced Websites to Shut Down Worldwide (GS 3 – Cyber Security)
- Nepal Becomes First Beneficiary of the Loss and Damage Fund (GS 2 & 3 – IR, Environment)
- Trump Shelves Plan to Rename the Atlantic Ocean (GS 1 & 2 – Geography, IR)
- RBI Rate-Setters Split Over Spreading Inflation (GS 3 – Economy)
- Why eMudhra Exited the Global Digital Certificates Business (GS 3 – Cyber Security, Economy)
- Bridge Grafting to Save 500+ Girdled Trees in Udanti-Sitanadi Tiger Reserve (GS 3 – Environment)
1. Emissions Gap Report 2026: Breach of 1.5°C Threshold Now 'Unavoidable'
Syllabus: GS Paper 3 – Environment, Climate Change, International Agreements
Why in the News?
The United Nations Environment Programme (UNEP) released the Emissions Gap Report (EGR) 2026, titled "The Point of Return", on 21 October 2026. For the first time, UNEP has declared that holding global warming below 1.5°C above pre-industrial levels with no or limited overshoot is no longer possible. The task now is to keep the overshoot as small and as short as possible and bring temperatures back below 1.5°C by 2100.
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Report | Emissions Gap Report 2026 – "The Point of Return" (17th edition) |
| Published by | United Nations Environment Programme (UNEP), Nairobi |
| Released on | 21 October 2026, London |
| Timing | Ahead of COP31 at Antalya, Türkiye |
| Global GHG emissions (2025) | About 58.4 Gt CO₂e, a marginal decline |
| Emission trend | Fossil CO₂, N₂O and F-gases rose in 2025; methane stayed nearly flat |
| Cuts needed to return to 1.5°C (vs 2025 levels) | 18% by 2030, 45% by 2035, 69% by 2040 |
| Core message | Overshoot of 1.5°C is inevitable; minimise its size and duration |
Key Findings Explained
- End of the "no-overshoot" pathway: Decades of insufficient action mean every realistic scenario now crosses 1.5°C. The debate shifts from avoiding to limiting and reversing overshoot.
- Fossil emissions keep rising: Total GHG emissions dipped slightly, but CO₂ from coal, oil and gas combustion continued to grow.
- Warming already visible: 2024 was the first calendar year above 1.5°C, and September 2026 was the second-hottest month on record.
- "Overshoot is not surrender": The UN Secretary-General stressed that steep, fast cuts can still pull temperatures back below 1.5°C within this century.
- Scalable solutions exist: The report highlights climate policies that have already delivered real emission cuts and could be replicated globally.
Static Concepts for Prelims
- Emissions Gap: The difference between where global emissions are projected to be (under current policies and NDCs) and where they should be to meet Paris goals.
- Overshoot: Temporarily exceeding a temperature limit before bringing it down again, usually through deep emission cuts and carbon dioxide removal.
- Paris Agreement (2015): Aims to hold warming "well below 2°C" and pursue efforts to limit it to 1.5°C. Countries submit Nationally Determined Contributions (NDCs) every five years.
- UNEP: Established in 1972 after the Stockholm Conference; headquartered in Nairobi, Kenya. Other flagship reports include the Global Environment Outlook and the Adaptation Gap Report.
- Origin of the 1.5°C goal: First championed by small island states at Copenhagen (COP15, 2009) because sea-level rise threatens their survival.
Significance for India
- India faces intense heatwaves, erratic monsoons and glacier melt, all of which worsen with each tenth of a degree.
- Overshoot raises the demand for climate finance, adaptation and carbon removal, sharpening the developed–developing divide on equity and Common But Differentiated Responsibilities (CBDR-RC).
- India's per capita emissions remain among the lowest of major economies, which strengthens its negotiating position at COP31.
Mains Angle
"With the 1.5°C limit set to be breached, global climate policy must move from mitigation targets to managing overshoot." Critically examine the implications for developing countries like India. (250 words)
2. PHP2Shell: The Flaws That Forced Websites to Shut Down Worldwide
Syllabus: GS Paper 3 – Cyber Security, Science and Technology
Why in the News?
Two critical vulnerabilities in the core engine of PHP, the scripting language behind roughly 70% of websites, were disclosed in October 2026 under the name PHP2Shell. A working exploit leaked before patches were ready, prompting governments, Wikipedia, the Internet Archive and thousands of other sites to go offline as a precaution.
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Name | PHP2Shell |
| Identifiers | CVE-2026-109618 and CVE-2026-109619 |
| Severity | CVSS score 9.2 (critical) |
| Type of attack | Remote Code Execution (RCE) without login or user interaction |
| Affected software | PHP core engine; platforms such as WordPress, Drupal, Joomla, MediaWiki |
| Reach | PHP powers about 70% of websites |
| Peak disruption | 21 October 2026 – thousands of sites offline |
| Notable shutdowns | Wikimedia services, Internet Archive, EU and Dutch government portals, Finnish and French government sites, 4chan |
| Exposure after patch | Around 32.5 million PHP services still running vulnerable versions |
| Status | Active exploitation confirmed; listed in the US CISA Known Exploited Vulnerabilities catalogue |
What Happened?
- Discovery with AI help: The flaws were reportedly found with the assistance of AI-driven security research.
- Disclosure gone wrong: Normally, a patch is ready before details become public (responsible disclosure). Here, a proof-of-concept leaked early on an online forum.
- Precautionary shutdowns: Cyber agencies in Europe, Canada and the US advised organisations to take sites offline or into maintenance mode until patched.
- Real-world attacks: Threat actors chained PHP2Shell with a Linux privilege-escalation bug to gain root access on servers, including some linked to government networks.
- Patch gap: Many servers still run outdated PHP versions (such as 7.4 or 8.1 and earlier) that no longer receive regular security updates.
Static Concepts for Prelims
- Remote Code Execution (RCE): A flaw that lets an attacker run any command on a target machine from a distance.
- CVE (Common Vulnerabilities and Exposures): A public catalogue that gives each known flaw a unique ID.
- CVSS: A 0–10 scale that rates how severe a vulnerability is; 9.0 and above is "critical".
- Zero-day: A flaw exploited before a fix is available.
- CERT-In: India's national nodal agency for cyber incident response under Section 70B of the IT Act, 2000, working under MeitY.
- NCIIPC: Protects India's Critical Information Infrastructure under Section 70A of the IT Act.
Significance for India
- Many Indian government, university and e-governance portals run on PHP-based content management systems.
- The episode highlights the risk of unsupported legacy software in public digital infrastructure.
- It shows that AI can speed up both the discovery and the exploitation of vulnerabilities, demanding faster patching cycles.
- It strengthens the case for a robust National Cyber Security Strategy and mandatory patch-management audits.
Mains Angle
"Open-source software is a global public good but also a single point of failure." Discuss in the context of recent cyber incidents and suggest measures for India. (150 words)
3. Nepal Becomes the First Beneficiary of Global Funding for Loss and Damage
Syllabus: GS Paper 2 – International Relations; GS Paper 3 – Environment, Disaster Management
Why in the News?
The Fund for Responding to Loss and Damage (FRLD) has provisionally earmarked US$20 million for Nepal to recover from the devastating floods of 26 August 2026. It is the first time the fund has set aside money for any country, turning years of pledges into an actual allocation.
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Beneficiary | Nepal – the first country to receive an FRLD allocation |
| Disaster | Flash floods of 26 August 2026 (Rasuwa region) |
| Amount | US$20 million grant + US$1.6 million oversight fee = US$21.6 million |
| Cap | US$20 million is currently the maximum the fund can approve for a single event |
| Nepal's estimated losses | About US$5 billion, roughly 10% of its GDP |
| Share covered | Under 1% of the estimated losses |
| Trustee / host | World Bank |
| Next board meeting | 11th meeting, Kathmandu, 17–19 March 2027 |
Evolution of the Loss and Damage Fund
| Year | Milestone |
|---|---|
| 2013 | Warsaw International Mechanism (WIM) for Loss and Damage set up at COP19 |
| 2015 | Article 8 of the Paris Agreement recognises loss and damage |
| 2019 | Santiago Network created at COP25 for technical assistance |
| 2022 | COP27 at Sharm el-Sheikh, Egypt, agrees to establish the fund |
| 2023 | COP28 at Dubai, UAE, operationalises the fund |
| 2026 | First allocation – Nepal |
Static Concepts for Prelims
- Loss and damage: Climate impacts that go beyond what adaptation can prevent, covering both economic losses (homes, crops, infrastructure) and non-economic losses (lives, culture, biodiversity).
- Sudden-onset vs slow-onset events: Floods, cyclones and cloudbursts are sudden; sea-level rise, glacier retreat and desertification are slow.
- Barbados Implementation Modalities (BIM): The start-up phase through which the FRLD is first disbursing money.
- Related funds: Green Climate Fund (GCF), Adaptation Fund, Global Environment Facility (GEF).
Significance
- Climate justice milestone: Developing countries, least responsible for emissions, finally see compensation-style finance flow.
- Test of credibility: Nepal's case is shaping how quickly the fund can disburse money after disasters.
- Funding gap exposed: A US$20 million cap against US$5 billion of losses shows how under-resourced the fund remains.
- Relevance for India: As a Himalayan neighbour facing similar glacial lake outburst floods and cloudbursts, India has a stake in rapid-response climate finance and regional disaster cooperation.
Mains Angle
"The first allocation from the Loss and Damage Fund is a milestone, but it also exposes the gap between climate promises and delivery." Discuss. (150 words)
4. Trump Shelves Plan to Rename the Atlantic Ocean After a 'No' from Pichai
Syllabus: GS Paper 1 – World Geography; GS Paper 2 – International Relations
Why in the News?
At a rally in South Carolina, US President Donald Trump said he had asked Google CEO Sundar Pichai to rename the Atlantic Ocean on Google Maps. According to Trump, Pichai declined, saying oceans are different because they touch many countries. Trump said he would "probably pass" on the idea, though he floated calling the Pacific "the American Ocean".
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Proposal | Rename the Atlantic Ocean (with "Trump" or "America") |
| Response | Google declined, according to Trump; Google has not confirmed the call |
| Earlier renaming 1 | Gulf of Mexico → "Gulf of America" (shown to US users on Google Maps since 2025) |
| Earlier renaming 2 | Lake Ontario → "Lake America" (August 2026 executive order; Google and Apple Maps followed) |
| Next targets mentioned | A river (Hudson or Mississippi) and the Pacific Ocean |
How Are Geographical Features Named?
- Domestic features: In the US, the Board on Geographic Names standardises names for federal use. In India, the Survey of India and the Ministry of Home Affairs handle renaming of places.
- International waters: The International Hydrographic Organization (IHO), headquartered in Monaco, publishes the reference document Limits of Oceans and Seas (S-23). India is a member.
- UN coordination: The United Nations Group of Experts on Geographical Names (UNGEGN) promotes consistent use of names worldwide.
- No unilateral power: A single country cannot rename an ocean shared by many nations; it can only change names used within its own official records.
Static Facts on the Atlantic Ocean
- Second-largest ocean, covering about one-fifth of Earth's surface.
- Separates the Americas from Europe and Africa; S-shaped basin.
- Key features: Mid-Atlantic Ridge, Gulf Stream, Sargasso Sea, Bermuda Triangle.
- Lake Ontario, the smallest of the Great Lakes by area, is shared by the US and Canada, which makes its unilateral renaming diplomatically sensitive.
Significance
- Cartographic nationalism: Names on maps are increasingly used to assert identity and sovereignty, as in disputes over the Sea of Japan/East Sea and the Persian Gulf/Arabian Gulf.
- Role of Big Tech: Private platforms like Google Maps now shape how billions see geography, raising questions about corporate neutrality under political pressure.
- India's experience: India has objected to China "renaming" places in Arunachal Pradesh, showing that naming is a tool of strategic messaging.
Mains Angle
"Maps are not neutral." Examine the growing use of place-naming as a geopolitical tool, with examples. (150 words)
5. RBI Rate-Setters Split Over Inflation Spreading
Syllabus: GS Paper 3 – Indian Economy, Monetary Policy, Inflation
Why in the News?
Minutes of the Reserve Bank of India's Monetary Policy Committee (MPC) meeting of 5–7 October 2026, released on 21 October, show that all six members backed a 25 basis point hike in the repo rate to 5.50%. But they were split 4–2 on whether inflation is spreading across the economy, and therefore on changing the policy stance to "calibrated tightening".
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Meeting | 63rd MPC meeting, 5–7 October 2026 |
| Minutes released | 21 October 2026 (under Section 45ZL, RBI Act, 1934) |
| Decision | Repo rate raised by 25 bps to 5.50% – unanimous |
| Stance | Changed from "neutral" to "calibrated tightening" – 4:2 vote |
| Majority view | Governor Sanjay Malhotra and three others saw inflation becoming broad-based |
| Minority view | Two external members saw no strong signs of generalised inflation |
| CPI forecast FY27 | 5.2% (up from 5.0% in August); Q3 at 6.0% |
| Core inflation (August) | 4.2% (up from 3.9% in July) |
| GDP forecast FY27 | 7.1% |
| Earlier cycle | Cumulative 125 bps of cuts, from 6.5% to 5.25%, before this hike |
| Next meeting | 2–4 December 2026 |
What Is Driving the Debate?
- Supply shocks: Conflict in West Asia has pushed up crude oil prices, while food prices remain volatile.
- Spillover risk: The majority worried that price pressures are moving from food and fuel into core goods and services, which tends to make inflation persistent.
- Minority caution: Two members felt the pressure is still supply-driven, and that signalling more tightening could hurt growth unnecessarily.
- Outlook: The minutes suggest the choice in December will be between another hike and a pause, not a cut.
Static Concepts for Prelims
- MPC: Six-member body constituted under Section 45ZB of the RBI Act, 1934 (inserted by the Finance Act, 2016). Three members are from the RBI, including the Governor as chair; three are external members appointed by the Central Government.
- Voting: Decisions are by majority; the Governor has a casting vote in case of a tie.
- Inflation target: CPI inflation of 4% with a tolerance band of ±2%, set by the government every five years.
- Repo rate: The rate at which RBI lends short-term funds to banks against government securities.
- Policy stances: Accommodative, neutral, calibrated tightening, withdrawal of accommodation.
- Generalised inflation: When price rises spread across a wide basket of items, not just a few volatile ones.
- Core inflation: CPI inflation excluding food and fuel.
Significance
- Marks a clear reversal of the easing cycle, which will raise EMIs on home and auto loans.
- Dissent within the MPC reflects healthy debate and transparency in India's inflation-targeting framework.
- Shows the limits of monetary policy against supply-side shocks such as oil prices.
Mains Angle
"Monetary policy is a blunt tool against supply-side inflation." Discuss in the light of the RBI's recent policy shift. (250 words)
6. Why eMudhra Exited the Digital Certificates Business
Syllabus: GS Paper 3 – Cyber Security, Digital Infrastructure
Why in the News?
Bengaluru-based digital trust company eMudhra announced on 22 October 2026 that it is voluntarily exiting the global SSL/TLS certificate business. The move followed the discovery that private keys behind eight of its intermediate Certificate Authority (CA) certificates were weak or compromised, leading major browsers to stop trusting its certificates.
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Company | eMudhra Limited, Bengaluru |
| Decision | Board-approved exit from the global SSL/TLS certificate business |
| Trigger | Weak/compromised private keys in eight intermediate CA certificates |
| Browser response | Google, Mozilla, Apple and Microsoft moved to distrust its certificates |
| Advisory | Issued by CERT-In |
| Revenue impact | Global SSL/TLS business is about 1% of total revenue |
| Market reaction | Shares fell about 20% in a single session |
| Unaffected businesses | Indian Digital Signature Certificates (DSC), eSign, enterprise PKI |
| Customer transition | Replacement certificates through partner CAs |
| Company's stated reasons | Rising compliance costs, operational complexity, declining viability |
What Are SSL/TLS Certificates?
- SSL (Secure Sockets Layer) / TLS (Transport Layer Security) are protocols that encrypt data between a browser and a website. The padlock and "https" in the address bar show they are in use.
- A Certificate Authority verifies a website's identity and issues a digital certificate signed with its private key.
- Chain of trust: Root CA → Intermediate CA → Website certificate. Browsers trust a site only if this chain is intact.
- Why weak keys are dangerous: If a CA's private key can be derived, attackers can issue fake certificates to impersonate banks, government portals or any website and intercept traffic.
Indian Regulatory Framework
- Information Technology Act, 2000 gives legal recognition to electronic signatures and records.
- Controller of Certifying Authorities (CCA) under MeitY licenses and regulates CAs in India. eMudhra is one such licensed CA.
- Digital Signature Certificates (DSC) are used for e-filing of income tax, company filings (MCA), e-tenders and GST.
- eSign is an Aadhaar-based online electronic signature service.
Significance
- Trust is the product: In digital certificates, a single lapse can end a business line, regardless of its size.
- Global gatekeepers: Browser makers' root programmes effectively decide which CAs the world trusts, showing the concentration of power in a few tech firms.
- Digital sovereignty: India's ambition to build trusted Indian CAs for global use suffers a setback; strict key-generation standards and audits become vital.
- Link to DPI: India's Digital Public Infrastructure depends on robust PKI; continued integrity of DSC and eSign services is critical.
Mains Angle
"Public Key Infrastructure is the invisible backbone of the digital economy." Discuss its importance and the challenges in securing it, with reference to recent incidents. (150 words)
7. Forest Department to Seek Expert Help for 'Surgery' on 500+ Girdled Trees in Udanti-Sitanadi Tiger Reserve
Syllabus: GS Paper 3 – Environment, Conservation, Biodiversity
Why in the News?
The Chhattisgarh Forest Department is seeking expert help to save over 500 freshly girdled trees near Karka village inside the Udanti-Sitanadi Tiger Reserve (USTR). Encroachers allegedly girdled the trees to kill them and clear land for cultivation. The department plans to use bridge grafting, a form of tree surgery, and is also drawing on the traditional knowledge of local tribal communities.
Key Facts at a Glance
| Parameter | Detail |
|---|---|
| Location | Karka area, Udanti-Sitanadi Tiger Reserve, Chhattisgarh |
| Survey period | 22 September – 10 October 2026 |
| Girdled trees found | About 2,500 |
| Freshly girdled (savable) | Over 500 |
| Main species | Sal, Bija and Tendu |
| Cause | Alleged girdling by encroachers to clear forest for farming |
| Long-term loss | Over 1.25 lakh trees estimated cleared in the landscape between 2016 and 2026 |
| Rescue technique | Bridge grafting |
| Past attempt | 2022 trial in the reserve achieved only about 10% success |
What Is Girdling?
- Girdling (ring-barking) is the removal of a strip of bark all the way around a tree trunk.
- It cuts the phloem, which carries food (sugars) from leaves down to the roots, and damages the cambium, the layer that produces new tissue.
- The roots starve, and the tree dies slowly while still standing.
- Order of layers from outside in: Bark → Phloem → Vascular cambium → Xylem → Pith.
What Is Bridge Grafting?
- A repair graft used to rescue trees girdled by animals, machinery or people.
- Healthy twigs (scions) are inserted to connect the living bark and cambium above the wound to the bark below it.
- These "bridges" restore the flow of food from leaves to roots, letting the tree survive.
- It needs skilled labour and precise timing, and success rates are often low.
About Udanti-Sitanadi Tiger Reserve
- Location: Gariaband and Dhamtari districts, Chhattisgarh.
- Notified: 2009, combining the Udanti and Sitanadi Wildlife Sanctuaries.
- Area: About 1,842 sq km (core about 851 sq km; buffer about 991 sq km).
- Rivers: Named after the Udanti and Sitanadi rivers; lies in the origin landscape of the Mahanadi.
- Forest type: Tropical dry and moist deciduous, dominated by Sal.
- Fauna: Tiger, wild buffalo (Chhattisgarh's state animal), leopard, sloth bear, Indian wolf, mouse deer.
- Connectivity: Links with Odisha's Sunabeda Wildlife Sanctuary and the Indravati Tiger Reserve landscape.
Significance
- Encroachment threat: Girdling is a quiet method of clearing forests without visible felling, making it harder to detect and prosecute.
- Rights vs conservation: Highlights the tension between forest-dweller claims under the Forest Rights Act, 2006 and protection of core tiger habitat under the Wildlife (Protection) Act, 1972.
- Innovative restoration: A rare attempt to repair, rather than replant, damaged forest, which can be a model for other degraded forests.
- Water security: Restoring this landscape supports the health of the Mahanadi river system.
Mains Angle
"Encroachment, not poaching, is emerging as the biggest threat to India's tiger reserves." Critically analyse. (150 words)