Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
A researcher says unpatched Tailscale SSH bugs could let a compromised device gain root on other reachable servers; details remain unverified.
Early‑2026 BlackX bootkit exploits CVE‑2022‑21894 to sidestep Secure Boot and disables Kaspersky/Avast defenses.
Researchers seized the insecure Time4Popcorn update domain, delivered a harmless payload and slashed update requests by 98%, protecting millions of Windows and macOS users.
Railway paused all new deployments after detecting suspicious activity on its environment‑variable storage, urging developers to rotate secrets immediately.
Up to 26,739 VPS servers were infected after hackers breached Onamae Desktop Cloud, prompting GMO Internet to shut down the service.
PHP's security team warned of two CVSS 9.2 remote‑code‑execution flaws (CVE‑2026‑109618, CVE‑2026‑109619) and will push emergency updates on Oct 21.