Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
37 result(s) for “Vulnerability”
Over 1,400 flaws fixed on Oct 13, including 78 critical bugs and a Windows Shell zero‑day, while Microsoft pushes Windows 10 support to 2027.

Hackers exploit high‑severity stored XSS in two popular WordPress plugins to drop a fake “WP Smart Thumbnails” plugin, create hidden admin accounts and persist via secret login URLs.

Researchers see probes from a China Telecom IP hunting the session‑cookie signing flaw in Rejetto HFS, fixed in v3.2.1, with no confirmed exploits yet.

Fortinet warns that FortiMail 7.2‑8.0 is vulnerable to a CVSS 9.8 path‑traversal bug that attackers are already exploiting, and offers workarounds and upcoming patches.
Apple says attackers are already weaponizing CVE‑2026‑86950, an out‑of‑bounds write bug, in targeted attacks.
Citrix says CVE‑2026‑88771 and CVE‑2026‑88772 are being exploited, releases patches and the Dutch NCSC warned organizations before public disclosure.