680 results
According to an October 22 report by iThome, Shin Kong Mitsukoshi stated that internal security monitoring detected IT system anomalies indicative of suspected unauthorized external intrusion; preliminary checks showed that the names, addresses, and contact phone numbers of some home delivery order customers—reportedly around 20,000 customers—were affected .
On October 22, TWCERT/CC published TVN-202610006: New Type Information Co.
CISA, the FBI, the US Secret Service and international partners released a joint advisory warning that SafePay is one of the most active ransomware groups of 2026, impacting about 600 victims across the Americas, Europe and Australia .
Railway said the attack ran from October 20 to 22 and aimed to obtain AI provider API keys for distillation attacks, interrupting builds and deployments .
GMO Internet said that on October 20 it confirmed a third party had planted a malicious program on some customer servers of its Onamae.
LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.
According to iThome, at 9:00 a.
On October 22, the Administration for Cyber Security (ACS), MODA urged public and private sectors to accelerate patching: Node.
On October 21, Gourmet Master Co.
Oliver's Travels said it discovered on October 20, 2026 that an unauthorized third party had accessed some of its systems, including its booking system, with the incident believed to have begun on October 19 .
According to iThome, on October 19, apparel company Munsin Enterprise (2916) issued a material announcement on the Market Observation Post System (MOPS), stating that it recently received consumer reports of suspected personal data leakage resulting from an automated attack on a database provided by its outsourced service platform vendor, in which partial information was unlawfully scraped .
According to reports by the United Daily News and China Times, a written operational report submitted by the National Security Bureau (NSB) to the Legislative Yuan on October 20 stated that through September, Taiwan's Government Service Network (GSN) experienced an average of over 2.
On October 20, TWCERT/CC published TVN-202610007: Asia Xuan Information's BA-Workflow contains three SQL injection vulnerabilities, each with a CVSS v4.
On October 20, TWCERT/CC published TVN-202610005: Kaifa Technology's WebITR contains an insecure deserialization vulnerability (CVSS v4.
On October 20, TWCERT/CC published TVN-202610004: ArmorX Global Technology's ArmorX Spam contains a local file inclusion vulnerability (CVE-2026-113402) and a command injection vulnerability (CVE-2026-113403), each with a CVSS v4.
Japan's H2O Retailing and its subsidiary Hankyu Hanshin Department Stores said on October 19 that a third party gained unauthorized access to the customer management system via the department stores' booking site on October 16, and that unauthorized access was also found the next day on the official shopping site HANKYU HANSHIN E-STORES and on Remo Order, after which the company shut the sites down .
Vulone disclosed on Oct 18 that a China-linked, financially motivated operator built an AI-agent intrusion platform on the open-source Cairn framework and ran 66 operations between Sep 24 and Oct 14, 48 of which reached at least session-level access .
According to fuitededonnées.
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
FANCL and its subsidiary Attenir announced on October 16 that an internal investigation on the 15th found their e-commerce sites were accessed without authorization between October 3 and 10, and they identified and disabled the abused function .