HighMalwareMonitoringBackfill· updated Nov 12
China’s CNCERT warned on 9 October that the Windows “Jianpian Player” downloaded from the so-called official Jianpian site (www.
729 results
China’s CNCERT warned on 9 October that the Windows “Jianpian Player” downloaded from the so-called official Jianpian site (www.
BOOKOFF Group announced on October 9 that a third party accessed its subsidiary's member management system without authorization, leaking up to about 6.
Switzerland's SMG group announced on October 9 that its marketplace Ricardo detected suspicious server activity on October 7 and found personal data of about 890,000 user accounts was exposed; the vulnerability that allowed the access has been fixed .
Japan's Adventure Inc.
Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking .
According to The Business Standard, citing a statement from Pathao, a cybersecurity incident on October 4, 2026 disrupted platform services and allowed malicious actors to obtain certain user information .
LAWSON said on 8 October that its LAWSON ID account service and LAWSON App reservation service had been accessed by a third party and that some customer personal data had leaked; a 7 October review found the LAWSON ID access occurred from 12 to 14 September and the reservation-service access on 17 September, and it said it had not found other intrusions or malware .
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
Switzerland's FDPIC said PK Softech AG reported a cyberattack on its IT infrastructure on October 8, with data extracted from several pension funds including the federal pension fund Publica, and it opened a formal investigation on October 22 .
According to INTERNET Watch, Japan's Daiichi Kosho announced on October 8 that a PC of an employee at Nippon Columbia Group, which handles personal data on its behalf, was infected with malware on October 1-2, putting names, gender, birth dates, emails and phones of about 8,724,000 Big Echo and other store members and staff at risk, without passwords .
According to INTERNET Watch, Japanese convenience store chain Lawson announced on October 8 that an October 7 investigation found unauthorized access to Lawson ID from September 12 to 14 and to Lawson app reservations on September 17 .
According to iThome, after game software developer International Games System (IGS, 3293) announced in late September that its operational IT equipment was breached by an unknown IP address, the company issued a follow-up material announcement on the Market Observation Post System (MOPS) on October 7 explaining that the incident resulted in the leakage of game operational data, including partial player names, phone numbers, and email addresses; the company has notified personal data protection regulators in accordance with the law, informed affected individuals via email and SMS, and provided dedicated customer support contact information .
According to iThome, on the night of October 7, medical supplies retailer MedFirst Healthcare Services (4175) issued a material announcement on the Market Observation Post System (MOPS), stating that a small number of consumers reported suspected improper acquisition of data from a website platform managed by an outsourced vendor, followed by email contact with consumers .
Openwave Messaging says Webtop Media Transcoder before 1.
Japanese cloud provider IDC Frontier said on October 7 that an outage in its IDCF Cloud East Japan Region 1 starting at about 3:40 a.
According to iThome, General Plastic Industrial (GPI) announced on October 7 that its subsidiary Katun Corporation experienced a cybersecurity incident involving anomalous access to some information systems .
According to iThome, on the evening of October 6, online job bank operator 104 Corporation (3130) issued a material announcement on the Market Observation Post System (MOPS), stating that it detected abnormal data read activity on its app system and immediately implemented protective and blocking measures, notified relevant regulatory authorities, and filed a report with the Taipei Field Office of the Investigation Bureau .
According to Yonhap, security firm Oasis Security found data from two large Korean churches on an overseas attacker server; one was breached via a web shell on its ERP server with database admin rights obtained, while the other's groupware was accessed with previously obtained accounts and then its ERP via single sign-on .
The UK NCSC said some ASOS customers received an unauthorized push notification from the ASOS app on October 6, and the company confirmed customer names and contact details were accessed .
On October 6, 104 Corporation issued a material information filing on MOPS stating that it had detected abnormal read activity on its App system, and an investigation confirmed that approximately 120,000 resume records were read without authorization .