Cybersecurity
353 articles RSS
KDDI Data Breach Exposes Up to 14.2 Million Email Logins Across Six Japanese ISPs After Third-Party Software Zero-Day
A vulnerability in third-party email software let attackers reach up to 14.2 million KDDI ISP logins; a later update put confirmed exposure at 12.23 million addresses and 7.61 million passwords.
Aflac Japan Confirms Breach of 4.38 Million Customers and Agents After Attackers Accessed Its Policyholder Portal
Aflac Life Insurance Japan says attackers accessed its policyholder portal between June 15 and 25, exposing personal data on roughly 4.38 million customers and agents.
JetBrains Patches Critical Hub Authentication Bypass and Account Takeover Flaws Across Its IDE Ecosystem
JetBrains patched three critical Hub and YouTrack flaws enabling account takeover and authentication bypass, alongside code-execution fixes across IntelliJ, GoLand, and TeamCity.
Adobe Patches Seven Maximum-Severity ColdFusion and Campaign Classic Flaws, Each Rated CVSS 10.0 for Code Execution
Adobe's July 1 updates fix seven CVSS 10.0 flaws—six in ColdFusion, one in on-premises Campaign Classic—that can lead to arbitrary code execution.
CISA Sets a July 2 Deadline as SimpleHelp Auth-Bypass Flaw CVE-2026-48558, Rated CVSS 10, Is Exploited to Deploy Djinn Stealer
A perfect-score authentication bypass in SimpleHelp's OIDC login is being exploited in the wild to deploy TaskWeaver and Djinn Stealer, prompting CISA to give federal agencies until July 2 to patch.
CISA Adds Actively Exploited SharePoint RCE CVE-2026-45659 to KEV, Giving Federal Agencies Three Days to Patch
A deserialization flaw in on-premises SharePoint, patched in May, is now confirmed under active exploitation, with a July 4 federal deadline.
Microsoft Ties Mastra npm Supply-Chain Attack to North Korea's Sapphire Sleet as 'easy-day-js' Typosquat Poisons 140-Plus AI Packages
Microsoft attributes the June 17 compromise of 140-plus Mastra npm packages to North Korean state actor Sapphire Sleet, which used a hijacked maintainer account to inject a malicious dayjs typosquat called easy-day-js.
Miasma Worm Forges SLSA Provenance and Hides in binding.gyp as It Hits Red Hat, Vapi, and Leo Platform npm Packages
A self-spreading npm worm called Miasma published Trojanized packages carrying valid-looking SLSA provenance, beginning with 32 @redhat-cloud-services releases on June 1.
DifyTap: Four Authorization Flaws Let Attackers Silently Wiretap AI Chats Across Tenants on a Platform Powering Over 1 Million Apps
Zafran Security disclosed four authorization flaws in the open-source LLMOps platform Dify, including two critical bugs that let an attacker redirect another tenant's AI conversations to an attacker-controlled endpoint.
World Food Programme Breach Exposes Data of 600,000 Gaza Households in What Researchers Call the Largest Known Hack of Humanitarian Beneficiary Records
A cyberattack on the UN World Food Programme's Palestine registration app exposed personal data of about 600,000 Gaza households, drawing criticism over a 17-day notification delay.
24 Billion Stolen Credentials Found Exposed in an 8.3 TB Elasticsearch Cluster Dominated by Infostealer Logs
Cybernews researchers found an unsecured Elasticsearch cluster holding 24 billion records compiled from 36 sources, mostly infostealer logs with plaintext passwords.
Symantec Links a Self-Destructing 'Mistic' Backdoor to the KongTuke Access Broker Feeding Six Ransomware Crews
Symantec ties the in-memory Mistic backdoor to access broker KongTuke, whose footholds have fed Qilin, Akira, Black Basta and other ransomware groups since April 2026.