290 results
Zoom published two security bulletins on November 10, 2026, saying improper input validation flaw CVE-2026-108186 in Zoom Workplace for Windows may let an unauthenticated user escalate privileges via network access, rated Critical with CVSS 9.
Fortinet disclosed FortiOS flaw CVE-2026-126259 on November 10, 2026: on devices using HA FGSP with standalone-config-sync or autoscale, an unauthenticated attacker can send crafted HA packets to run commands as super admin, rated Critical with CVSSv3 9.
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
Apple released iOS and iPadOS 27.
CNA reports that Taiwanese online travel agency ezTravel detected an external attack on its member center on Nov 7, and some historical order contact data was improperly obtained, affecting more than 690,000 people .
The Roundcube team released Webmail security updates 1.
NTT Data announced on Nov 9 that the sign-up service for Sumitomo Life's standalone Vitality programs, which it builds and operates under contract, was accessed by a third party and personal data of about 80,000 users leaked .
Japanese furniture retailer Nitori Holdings said on November 9 that it confirmed unauthorized third-party access to a system it manages on November 6 and that up to 37.
BleepingComputer reports that a threat actor using the ShinyHunters handle, believed to be impersonating the extortion gang, is selling what they claim are records of 335 million Binance users on a new underground forum and asking $900,000 .
According to United Daily News, a 38-year-old man surnamed Lin in Kaohsiung used AI to write scripts to illegally breach the website backends of government agencies and private enterprises, stealing over 230,000 personal data records of citizens and selling them on the dark web .
Japanese indoor golf school operator Step Golf said in a second notice on Nov 10 that it was accessed without authorization on Oct 23 and 25, and database backup files containing personal data were very likely leaked .
Amplifon Americas said an unauthorized third party obtained files from certain systems between Jan 18 and Feb 8, 2026; it detected suspicious activity on Feb 11 and determined on Oct 6 that personal information may have been affected .
Mirae Asset Securities announced that its internal groupware system, mi-global, suffered an external attack on November 5, leaking personal data of approximately 35,255 employees, including former and outsourced personnel .
According to fuitededonnées.
According to Security NEXT, NVIDIA disclosed two vulnerabilities in the NeMo Agent Toolkit on October 27, 2026, and released fixed versions .
Japan's Doutor Coffee said on November 6 that its payment processor reported suspicious activity on its official online shop on October 28, and an investigation by its outsourced developer found a third party had accessed the site's admin panel on October 24-25 and exported and viewed member data .
York University in Toronto announced that an unauthorized actor accessed some online forms used by its departments and stole personal information, an incident it became aware of on October 25, 2026 .
Semiconductor packaging firm Xintec (3374) said in a Nov 6 MOPS filing that an unknown IP address intruded into its internal information systems .
According to Security NEXT, Yakult discovered a third-party intrusion into its website on October 26, 2026, and confirmed by November 4 that a total of 39,505 personal data records had been leaked .
According to Security NEXT, NTT Docomo detected an external intrusion into its Online Shop and My docomo services on November 4, 2026, suspending application procedures on both services for maintenance early the next morning .