731 results
According to Security NEXT, on the evening of December 17, 2024, a prefectural high school in Saitama Prefecture uploaded a seminar video intended only for students but mistakenly set its visibility permissions to public .
According to Security NEXT, furniture manufacturer and retailer WISE WISE discovered on November 18, 2024, that its business management system was inaccessible and confirmed two days later that it had been encrypted by ransomware .
According to Security NEXT, Ako City in Hyogo Prefecture was notified by its outsourced IT contractor on December 18, 2024, confirming that data on a Board of Education server had been encrypted by ransomware .
According to Security NEXT, Mynavi subsidiary 444 announced that a development server for its TechFUL service was breached in December 2024, potentially exposing personal information of contractors and users .
According to Security NEXT, Schoo announced that an error in trial account management for the group learning feature of Schoo for Business allowed certain users to view personal information of other users .
According to Security NEXT, Fujikura announced that on July 2, 2024, it discovered unauthorized external access via a network maintenance VPN managed by NTT Communications .
According to Security NEXT, the CookieSigner digital signature component in Apache Hive and Apache Spark contains vulnerability CVE-2024-23945 .
According to Security NEXT, a municipal junior high school teacher in Kariya City lost a personal USB flash drive at a commercial facility while returning home on October 4, 2024 .
According to Security NEXT, on December 13, 2024, the Nagano Prefecture Sewage Works Corporation mailed documents to 65 successful candidates of a drainage equipment technician examination .
According to Security NEXT, on the morning of December 26, 2024, Japan Airlines experienced router malfunctions connecting internal and external networks due to a massive influx of external traffic .
According to Security NEXT, JPCERT/CC warned in 2024 against focusing solely on VPN vulnerabilities, citing a 2023 watering hole attack targeting university-affiliated individuals .
According to TheCable, the website of Nigeria's National Bureau of Statistics (NBS) was compromised, with its homepage defaced with hacked messages .
On 2024-12-17, CISA added CVE-2024-55956 (Cleo Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Infobae, the Peruvian University of Applied Sciences (UPC) experienced a security incident involving student personal data .
On 2024-12-13, CISA added CVE-2024-50623 (Cleo Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Argentine media outlet TN, Argentina's National Atomic Energy Commission (CNEA) suffered a ransomware attack .
According to Hong Kong Free Press (HKFP), citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the Electrical and Mechanical Services Department (EMSD) experienced a data breach affecting approximately 17,000 individuals after learning in late April 2024 that the data remained publicly accessible .
On 2024-12-04, CISA added CVE-2024-51378 (CyberPersons CyberPanel) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2024-12-03, CISA added CVE-2024-11667 (Zyxel Multiple Firewalls) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Spanish public broadcaster RTVE, the headquarters of the National Institute for Agricultural and Food Research and Technology (INIA-CSIC) suffered a cyberattack .