574 results
Zoom published two security bulletins on November 10, 2026, saying improper input validation flaw CVE-2026-108186 in Zoom Workplace for Windows may let an unauthenticated user escalate privileges via network access, rated Critical with CVSS 9.
Fortinet disclosed FortiOS flaw CVE-2026-126259 on November 10, 2026: on devices using HA FGSP with standalone-config-sync or autoscale, an unauthenticated attacker can send crafted HA packets to run commands as super admin, rated Critical with CVSSv3 9.
Japanese car-care products maker Soft99 announced on Nov 10 that its official online shop was accessed by an outside third party, and personal data of up to 136,968 members and shoppers may have leaked .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
OTC-listed Hi-Lai Foods (1268) said in a November 10 material announcement that it was notified that day by its outsourced shopping mall vendor Cyberbiz of a security incident in which part of the vendor database was accessed without authorization, involving order data of some customers of its online mall .
Listed company HeySong (1234) said in a November 10 material announcement that its outsourced online store vendor Cyberbiz notified it of unauthorized anomalous access to part of the vendor database, which includes HeySong online store order data .
SAP's November 10 Security Patch Day bulletin rates four flaws in ICM, Web Dispatcher, SAP Gateway and the SAML2 service provider (CVE-2026-76964, CVE-2026-89126, CVE-2026-89103, CVE-2026-120017) at CVSS 10.
Apple released iOS and iPadOS 27.
CNA reports that Taiwanese online travel agency ezTravel detected an external attack on its member center on Nov 7, and some historical order contact data was improperly obtained, affecting more than 690,000 people .
A material notice republished by MoneyDJ says Taiwan Sakura (9911) was notified on Nov 9 by its e-commerce vendor Cyberbiz that some data in Cyberbiz's database, which holds orders and personal data from the SAKURA official online store, was accessed without authorization .
iThome reports that 曜亞 (4138) filed a cybersecurity material disclosure on the evening of November 9 saying the DR CYJ online store of its subsidiary 曜胜生技 was affected by a security incident at e-commerce provider 順立智慧 (Cyberbiz), with order-related data accessed without authorization .
iThome reports that Topco (5434) filed a cybersecurity material disclosure on MOPS on November 9 saying the e-commerce outsourcing provider of its subsidiary 安永生活 (Anyong), 順立智慧, recently experienced abnormal data access .
The Roundcube team released Webmail security updates 1.
NTT Data announced on Nov 9 that the sign-up service for Sumitomo Life's standalone Vitality programs, which it builds and operates under contract, was accessed by a third party and personal data of about 80,000 users leaked .
Japanese furniture retailer Nitori Holdings said on November 9 that it confirmed unauthorized third-party access to a system it manages on November 6 and that up to 37.
BleepingComputer reports that a threat actor using the ShinyHunters handle, believed to be impersonating the extortion gang, is selling what they claim are records of 335 million Binance users on a new underground forum and asking $900,000 .
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
On November 8, 2026, Taipei Exchange-listed Nobel Baby Co.
A researcher known as forcequit published worse_query, an iOS sandbox-escape proof of concept, on GitHub on November 8; it lets an app read other apps' data containers on iOS 26 and 27 .
According to United Daily News, a 38-year-old man surnamed Lin in Kaohsiung used AI to write scripts to illegally breach the website backends of government agencies and private enterprises, stealing over 230,000 personal data records of citizens and selling them on the dark web .