627 results
Boannews reports the Gwangju Dong-gu office said the admin page of its community-participation app "Uri Dongne do Banjang" lacked login authentication and was accessed from outside, leaking personal data of 2,101 people, confirmed on November 5 .
A MoneyDJ-carried material notice says Hotai Motor (2207) subsidiary Hotai Service Marketing was notified by Cyberbiz, the vendor of its Daikin air-conditioner parts online store, of unauthorized access to part of its database .
Boannews reports KB Capital said its vehicle lease asset management system was hit by a malicious attack confirmed on November 10, leaking personal data of 1,811 customers, partner-company staff and employees, 20 of them ordinary customers; the company said the system is unrelated to financial transactions .
Someone on the DarkForums and BreachForums underground forums claims to hold 46,000 TSMC employee records totalling 6.
Aikido says that since November 10 an attacker has used stolen GitHub credentials across 4,837 compromised accounts to open probe pull requests in 61,764 repositories, and at least 1,835 repositories ran the payload and had GitHub Actions secrets and cloud credentials stolen .
A CNA-carried material notice says the WooCommerce e-commerce database of Positive Energy Sports, a subsidiary of Positive Energy (5348), suffered unauthorized access and data extraction, with Nov 11 as the date of occurrence .
Wellead Biotech (7713) said in a Nov 11 MOPS material notice that its online-store vendor Cyberbiz reported unauthorized access to part of its database, involving some customers' order data from Wellead's store .
Telecom security firm Enea disclosed on November 11 a new state-level actor it calls SilentAir, tracked since early 2025, which launches signalling attacks from compromised SS7/Diameter network elements in operators in at least six Asian countries, primarily targeting Taiwanese mobile subscribers and also hitting a dozen more countries and territories .
SMBC Nikko Securities announced on 11 November that the stock-ownership-association management system it uses for outsourced plan administration was accessed by a third party, and personal data of some members was confirmed leaked .
SBS reports that the business website of Mirae Asset Global Investments, lead manager of about 38 trillion won of the roughly 88 trillion won public fund investment pool, was hacked last month .
BleepingComputer, citing Arctic Wolf, reports that attackers host self-managed instances of the open-source agentic pentest platform AntiFox, a fork of ARTEX 0.
BleepingComputer reports that US accounting firm Baker Tilly is notifying clients that an unauthorized actor obtained personal data about some clients and their dependents stored on a platform run by a third-party service provider .
Dentsu Digital announced on Nov 11 that an admin account used in the infrastructure of its TONARIWA marketing platform was accessed by a third party after its credentials leaked, with privileges escalated, and the service was suspended .
According to CNA, Minister of Digital Affairs Lin Yi-jing said on Nov 11 that more than 10 companies have reported being hit by cyberattacks, five or six of them large, and most incidents appear tied to AI-driven attacks .
BleepingComputer reports that Danish shipping and logistics group Maersk confirmed a threat actor breached systems belonging to a company it previously acquired and stole data .
The Record reports that Polish officials said on November 10, 2026 that they detected and stopped a cyberattack on ePUAP, the nationwide platform citizens and businesses use to submit documents and contact agencies, and temporarily shut it down .
KBS and Yonhap report that the information protection assessment support system of Korea's Financial Security Institute was hacked on November 9, 2026; the institute confirmed some data leaked, blocked the system and reported to the Financial Services Commission, and files from about 48 financial firms, some 130 in total, are estimated to have leaked .
Fortinet disclosed FortiOS flaw CVE-2026-126259 on November 10, 2026: on devices using HA FGSP with standalone-config-sync or autoscale, an unauthenticated attacker can send crafted HA packets to run commands as super admin, rated Critical with CVSSv3 9.
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .