MediumVulnerabilityMonitoringNo patch· updated Nov 11
A researcher known as forcequit published worse_query, an iOS sandbox-escape proof of concept, on GitHub on November 8; it lets an app read other apps' data containers on iOS 26 and 27 .
9 results
A researcher known as forcequit published worse_query, an iOS sandbox-escape proof of concept, on GitHub on November 8; it lets an app read other apps' data containers on iOS 26 and 27 .
According to Security NEXT, Denny's Japan discovered on October 30, 2026 that application-related systems had been breached by a third party, potentially exposing personal data of legacy app customers .
Nikkei Inc.
On October 6, 104 Corporation issued a material information filing on MOPS stating that it had detected abnormal read activity on its App system, and an investigation confirmed that approximately 120,000 resume records were read without authorization .
Japanese convenience store chain Seicomart said in its fourth report on October 5 that unauthorized access via the Seicomart app server affected 574,647 Seicomart Club members who had registered with the app .
According to CyberInsider, French intellectual property software and services firm Questel confirmed a voice phishing attack led to unauthorized access to a Sales SharePoint environment in its Microsoft 365, and some stolen data has been published .
According to The Independent, Chick-fil-A is notifying customers nationwide that unauthorized parties may have accessed personal and account information after an automated attack on its website and app in June; according to TechRadar, credential stuffing between June 17 and 19 breached thousands of accounts .
ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system .
According to Security NEXT, on the evening of December 17, 2024, a prefectural high school in Saitama Prefecture uploaded a seminar video intended only for students but mistakenly set its visibility permissions to public .