Category
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
Wiz says an attacker used IAM credentials from an AWS account associated with Qubole between Oct 14 and 26, 2026 to assume IAM roles that multiple customers had created to trust Qubole and enter their AWS environments .
The Hacker News reports that some Keplr crypto wallets set up with Google or Apple accounts had funds stolen by an attacker who used a security flaw at Web3Auth, the company running that sign-in .
According to Al Jazeera, an Egyptian digital advertising operator confirmed that one of its billboards was subjected to unauthorized control and immediately halted playback .
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
Website performance monitoring firm DebugBear said an unauthorized third party gained access to its domain registrar account and replaced its monitoring script with malicious code for about two hours, in what it assesses was a targeted, financially motivated attack on one customer website .
According to BleepingComputer, Japan Airlines said Amadeus notified it on October 23 of unauthorized access to its Passenger Service System between August 10, 2023 and September 23, 2026, exposing booking codes, names and flight details of about 92,000 JAL customers, plus emails, phones and passport numbers for about 2,000; ANA, Asiana and Korean Air also confirmed impact .
Korean enterprise software vendor Douzone Bizon said on October 23, 2026 that attackers used a flaw in the backup solution behind its APO backup service to exfiltrate some encrypted data from backup servers, adding that it has found no sign the encryption keys leaked and has not yet identified affected customers or individuals .
LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.
E-commerce technology provider 91APP confirmed that one of its Commerce Cloud order databases was illegally accessed on October 3 via an unpatched third-party tool, Appsmith, after which the attacker retrieved database credentials from an internal GitLab instance .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
CERT-EU said the AWS account behind the European Commission's europa.
Google Threat Intelligence Group (GTIG) published a report in August 2025 revealing that threat actors used compromised OAuth tokens associated with Salesloft Drift to access Salesforce environments across multiple organizations .
According to LOG, citing a notification from Turkey's Personal Data Protection Authority (KVKK), systems at a company processing data on behalf of Istanbul Gedik University suffered unauthorized access .
The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) issued a joint statement regarding a ransomware attack on printing vendor Toppan Next Tech .
According to the BBC, citing a statement from Banco Santander, the bank confirmed that data pertaining to customers in Chile, Spain, and Uruguay, as well as current and some former group employees, was accessed without authorization .