478 results
SMBC Nikko Securities announced on 11 November that the stock-ownership-association management system it uses for outsourced plan administration was accessed by a third party, and personal data of some members was confirmed leaked .
SBS reports that the business website of Mirae Asset Global Investments, lead manager of about 38 trillion won of the roughly 88 trillion won public fund investment pool, was hacked last month .
BleepingComputer, citing Arctic Wolf, reports that attackers host self-managed instances of the open-source agentic pentest platform AntiFox, a fork of ARTEX 0.
BleepingComputer reports that US accounting firm Baker Tilly is notifying clients that an unauthorized actor obtained personal data about some clients and their dependents stored on a platform run by a third-party service provider .
Dentsu Digital announced on Nov 11 that an admin account used in the infrastructure of its TONARIWA marketing platform was accessed by a third party after its credentials leaked, with privileges escalated, and the service was suspended .
According to CNA, Minister of Digital Affairs Lin Yi-jing said on Nov 11 that more than 10 companies have reported being hit by cyberattacks, five or six of them large, and most incidents appear tied to AI-driven attacks .
BleepingComputer reports that Danish shipping and logistics group Maersk confirmed a threat actor breached systems belonging to a company it previously acquired and stole data .
The Record reports that Polish officials said on November 10, 2026 that they detected and stopped a cyberattack on ePUAP, the nationwide platform citizens and businesses use to submit documents and contact agencies, and temporarily shut it down .
KBS and Yonhap report that the information protection assessment support system of Korea's Financial Security Institute was hacked on November 9, 2026; the institute confirmed some data leaked, blocked the system and reported to the Financial Services Commission, and files from about 48 financial firms, some 130 in total, are estimated to have leaked .
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
OTC-listed Hi-Lai Foods (1268) said in a November 10 material announcement that it was notified that day by its outsourced shopping mall vendor Cyberbiz of a security incident in which part of the vendor database was accessed without authorization, involving order data of some customers of its online mall .
Listed company HeySong (1234) said in a November 10 material announcement that its outsourced online store vendor Cyberbiz notified it of unauthorized anomalous access to part of the vendor database, which includes HeySong online store order data .
France-based Vates published Xen Orchestra security advisory VSA-2026-062 on November 10, saying the REST API treats a cookie such as authenticationToken=j:%7B%7D, which holds an empty object, as an unfiltered lookup and logs the caller in as the owner of the first unexpired token, and confirmed the flaw is being actively exploited .
SAP's November 10 Security Patch Day bulletin rates four flaws in ICM, Web Dispatcher, SAP Gateway and the SAML2 service provider (CVE-2026-76964, CVE-2026-89126, CVE-2026-89103, CVE-2026-120017) at CVSS 10.
According to The Philippine Star, the Philippine Securities and Exchange Commission (SEC) has confirmed a data breach affecting users of its digital platforms, with potentially exposed data limited to individual accounts' full name, username, email, mobile number, date of birth, gender, address and TIN; the SEC says no passwords or company records were affected and it notified the National Privacy Commission .
In a second report on 12 November, Raksul said a third party obtained credentials for its systems and, from about 03:00 on 7 November to about 01:00 on 8 November, could access data the company stored in the cloud within that authority; it revoked the credentials at about 01:00 on 8 November .
Japanese online printing service Raksul said on November 9, 2026 that unauthorized third-party access to its print data upload processing system was found around 0:20 on November 8, that system credentials had been improperly obtained, and that some stored data was accessible from outside .