MediumData breachActiveMedia reported· updated Nov 13
Security firm Claroc says it tried 43,551 Grok app addresses; 37,571 were online and 35,578 (94.
503 results
Security firm Claroc says it tried 43,551 Grok app addresses; 37,571 were online and 35,578 (94.
The Record reports that Polish officials said on November 10, 2026 that they detected and stopped a cyberattack on ePUAP, the nationwide platform citizens and businesses use to submit documents and contact agencies, and temporarily shut it down .
KBS and Yonhap report that the information protection assessment support system of Korea's Financial Security Institute was hacked on November 9, 2026; the institute confirmed some data leaked, blocked the system and reported to the Financial Services Commission, and files from about 48 financial firms, some 130 in total, are estimated to have leaked .
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
OTC-listed Hi-Lai Foods (1268) said in a November 10 material announcement that it was notified that day by its outsourced shopping mall vendor Cyberbiz of a security incident in which part of the vendor database was accessed without authorization, involving order data of some customers of its online mall .
Listed company HeySong (1234) said in a November 10 material announcement that its outsourced online store vendor Cyberbiz notified it of unauthorized anomalous access to part of the vendor database, which includes HeySong online store order data .
France-based Vates published Xen Orchestra security advisory VSA-2026-062 on November 10, saying the REST API treats a cookie such as authenticationToken=j:%7B%7D, which holds an empty object, as an unfiltered lookup and logs the caller in as the owner of the first unexpired token, and confirmed the flaw is being actively exploited .
SAP's November 10 Security Patch Day bulletin rates four flaws in ICM, Web Dispatcher, SAP Gateway and the SAML2 service provider (CVE-2026-76964, CVE-2026-89126, CVE-2026-89103, CVE-2026-120017) at CVSS 10.
Taiwan's Bureau of Consular Affairs said on 9 November 2026, and updated on 12 November, that it found suspected intrusions on some websites on the afternoon of 4 November and confirmed unauthorised access to 72,702 passport photos, 26,072 scanned authorisation letters verified by the New York office, and 774 APEC Business Travel Card applications .
According to The Philippine Star, the Philippine Securities and Exchange Commission (SEC) has confirmed a data breach affecting users of its digital platforms, with potentially exposed data limited to individual accounts' full name, username, email, mobile number, date of birth, gender, address and TIN; the SEC says no passwords or company records were affected and it notified the National Privacy Commission .
In a second report on 12 November, Raksul said a third party obtained credentials for its systems and, from about 03:00 on 7 November to about 01:00 on 8 November, could access data the company stored in the cloud within that authority; it revoked the credentials at about 01:00 on 8 November .
Japanese online printing service Raksul said on November 9, 2026 that unauthorized third-party access to its print data upload processing system was found around 0:20 on November 8, that system credentials had been improperly obtained, and that some stored data was accessible from outside .
Apple released iOS and iPadOS 27.
iThome reports that Maywufa (1731) filed a material disclosure on November 9 saying that on November 6 online store members reported a suspected personal data leak, which initial findings link to its outsourced e-commerce platform provider’s system, with the exact cause and scope still under investigation .
According to iThome, servers of NETivism, the vendor behind netiCRM, a donation management system used by Taiwanese nonprofits, were breached by an external attacker, and more than 20 organizations including the Awakening Foundation, Citizen Congress Watch, the Judicial Reform Foundation and Taiwan Tongzhi Hotline have issued notices .
CNA reports that Taiwanese online travel agency ezTravel detected an external attack on its member center on Nov 7, and some historical order contact data was improperly obtained, affecting more than 690,000 people .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .