
Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.

Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.

Cisco confirms active exploitation of a critical authentication‑bypass bug in Secure FMC, CISA adds it to the KEV list, and hot‑fixes are now required.

CISA warns that two of the 973 vulnerabilities disclosed on September 2026 Patch Tuesday – CVE‑2026‑81963 and CVE‑2026‑85880 – are already being exploited. Federal agencies must patch by Sep 22.

French prosecutors placed an 18‑year‑old suspected ZeroBytes hacker in pre‑trial detention after linking him to the DGFiP data breach.

A new post‑exploitation toolkit, PEEP, sideloads a malicious “Smart Bookmarks” extension into Chromium browsers, granting host‑level command execution and data exfiltration.

A publicly disclosed unauthenticated code‑execution flaw in Magento Open Source and Adobe Commerce is being exploited to install a backdoor, with no vendor fix available.

Lawsuits claim hackers accessed more than 153 million U.S. and Canadian ID scans from IDScan, prompting an FBI probe and dark‑web exposure.