According to Security NEXT, during an inventory check on September 9, 2026, Nara Prefecture discovered that a USB flash drive used for data exchange with its pharmaceutical and medical device application review system was missing .
314 results
According to Security NEXT, during an inventory check on September 9, 2026, Nara Prefecture discovered that a USB flash drive used for data exchange with its pharmaceutical and medical device application review system was missing .
MS&AD group insurers Mitsui Sumitomo Insurance and Aioi Nissay Dowa said on Nov 6 that unauthorized access to their policyholder portal was detected on the night of Nov 2, related services were halted late on Nov 3, and the investigation confirmed a data leak .
Kyocera Communication Systems (KCCS) issued a second update on November 6 stating that a web server operated by its subsidiary MOTEX suffered unauthorized access, potentially exposing customer information including company names, personal names, email addresses, and phone numbers .
According to Security NEXT, SonicWall disclosed two vulnerabilities in Global Management System (GMS) on November 3, 2026, but will not provide patches because the product has reached end of support .
According to Security NEXT, a use-after-free vulnerability (CVE-2026-98432) exists in IPv4 TCP connection handling in the Linux kernel .
According to Security NEXT, istyle confirmed on October 28, 2026, that @cosme suffered an intrusion exposing data for some shared-ID members .
According to Security NEXT, Club Tourism detected third-party access to its servers on October 30, 2026; subsequent investigation confirmed the intrusion vector and method, indicating that some personal data may have been exfiltrated .
According to Al Jazeera, an Egyptian digital advertising operator confirmed that one of its billboards was subjected to unauthorized control and immediately halted playback .
BleepingComputer reports that Russian cloud and hosting provider Beget said an attacker gained access to the management systems of its entire architecture on the night of Nov 1 and deployed malware that erased server data, after which Beget disconnected all servers .
According to RTHK, Hong Kong's privacy commissioner received breach notifications from several airlines and electrical retailers and opened investigations, logging 51 complaints and 48 enquiries as of October 30 with losses from about HK$10,000 to over HK$1.
According to iThome, on October 30, cable TV and broadband provider Taiwan Optical Platform (TOP) issued a cybersecurity material announcement disclosing that files on certain information systems of the company and its subsidiaries were encrypted, affecting internal system operations; on the same day, TOP's TPEx-listed subsidiary Shin Chuan International Multimedia Technology (6856) issued a similar material announcement stating that information systems of the company and its subsidiaries suffered a cyberattack in which some files could not be decrypted .
According to Security NEXT, Japan's Ministry of Foreign Affairs (MOFA) detected an intrusion on an externally connected network on July 27, 2026, and subsequently blocked access and disabled authentication credentials .
According to Security NEXT, the Good Smile Company Official Shop shut down on October 23, 2026 after being notified by its maintenance vendor, with logs showing multiple accesses to administrative information between October 19 and October 22 .
Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .
South Korean financial outlet Money Today said it confirmed a personal data leak from illegal external access on September 25, 2026, and a follow-up check on October 27 found 1,367 records leaked .
According to Security NEXT, the Aichi Prefectural Mental Health and Welfare Center lost 79 mental disability certificate applications and 154 medical care for services and supports for persons with disabilities certificate applications, affecting 172 individuals after deduplication .
According to iThome, Taiwan Optical Platform announced on October 30 that the company and its subsidiaries suffered a cyberattack in which files on some servers were maliciously encrypted .
According to Security NEXT, on October 28, 2026, Yamaha disclosed two vulnerabilities in its NWR100 wireless routers and released fixed firmware .
According to Security NEXT, on October 29, 2026, ServiceNow disclosed two vulnerabilities in AI Platform and one in Task Plan Templates, stating that updates released since September had addressed them .
According to Security NEXT, Japan's Ministry of Economy, Trade and Industry (METI) announced that the Dentrinet website associated with the Electricity and Gas Market Surveillance Commission suffered a cyberattack in the early hours of October 27, 2026 .