261 results
Boannews reports NHN Dooray announced on Nov 13 that attempted account access by an outsider was detected early that morning and emergency security measures were taken to protect private and public-sector customer accounts .
Check Point says attacks exploiting PHP2Shell also used local privilege escalation flaw CVE-2026-123039 in the Gaia OS Dynamic CLI service (CVSS 7.
A MoneyDJ-carried material notice says Hotai Motor (2207) subsidiary Hotai Service Marketing was notified by Cyberbiz, the vendor of its Daikin air-conditioner parts online store, of unauthorized access to part of its database .
Someone on the DarkForums and BreachForums underground forums claims to hold 46,000 TSMC employee records totalling 6.
Aikido says that since November 10 an attacker has used stolen GitHub credentials across 4,837 compromised accounts to open probe pull requests in 61,764 repositories, and at least 1,835 repositories ran the payload and had GitHub Actions secrets and cloud credentials stolen .
Wellead Biotech (7713) said in a Nov 11 MOPS material notice that its online-store vendor Cyberbiz reported unauthorized access to part of its database, involving some customers' order data from Wellead's store .
BleepingComputer, citing Arctic Wolf, reports that attackers host self-managed instances of the open-source agentic pentest platform AntiFox, a fork of ARTEX 0.
BleepingComputer reports that US accounting firm Baker Tilly is notifying clients that an unauthorized actor obtained personal data about some clients and their dependents stored on a platform run by a third-party service provider .
Dentsu Digital announced on Nov 11 that an admin account used in the infrastructure of its TONARIWA marketing platform was accessed by a third party after its credentials leaked, with privileges escalated, and the service was suspended .
BleepingComputer reports that ConnectWise is investigating an active campaign targeting managed service providers that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices .
Boannews reports that ransomware hit some servers managed by Hanil Networks, the IT infrastructure subsidiary of UBase Group, on November 2, 2026, and the company says it blocked the attack immediately and found no sign that important data, including personal data, leaked .
Fortinet disclosed FortiOS flaw CVE-2026-126259 on November 10, 2026: on devices using HA FGSP with standalone-config-sync or autoscale, an unauthenticated attacker can send crafted HA packets to run commands as super admin, rated Critical with CVSSv3 9.
France-based Vates published Xen Orchestra security advisory VSA-2026-062 on November 10, saying the REST API treats a cookie such as authenticationToken=j:%7B%7D, which holds an empty object, as an unfiltered lookup and logs the caller in as the owner of the first unexpired token, and confirmed the flaw is being actively exploited .
In a second report on 12 November, Raksul said a third party obtained credentials for its systems and, from about 03:00 on 7 November to about 01:00 on 8 November, could access data the company stored in the cloud within that authority; it revoked the credentials at about 01:00 on 8 November .
Japanese online printing service Raksul said on November 9, 2026 that unauthorized third-party access to its print data upload processing system was found around 0:20 on November 8, that system credentials had been improperly obtained, and that some stored data was accessible from outside .
SEGA Corporation said on 9 November 2026 that a delivery system of Arara Inc.
iThome reports that Maywufa (1731) filed a material disclosure on November 9 saying that on November 6 online store members reported a suspected personal data leak, which initial findings link to its outsourced e-commerce platform provider’s system, with the exact cause and scope still under investigation .
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .
iThome reports that 曜亞 (4138) filed a cybersecurity material disclosure on the evening of November 9 saying the DR CYJ online store of its subsidiary 曜胜生技 was affected by a security incident at e-commerce provider 順立智慧 (Cyberbiz), with order-related data accessed without authorization .