Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
37 result(s) for “Vulnerability”
A percent‑encoded “%50SEMHUB” path slips past WAFs, letting ShinyHunters hit Oracle PeopleSoft’s CVE‑2026‑35273 and plant web shells worldwide.

Hacktron leveraged Claude Opus 5 to combine a libheif RCE bug in Discourse with an OpenAI SSO flaw, briefly hijacking staff ChatGPT and Codex accounts and accessing an internal repo.

Hacktron used Claude to auto‑write a remote‑code‑execution exploit for Discourse, then leveraged over‑permissive OpenAI sign‑in tokens to take over an employee’s ChatGPT account and push code to an internal repo.

Acronis reports CVE‑2026‑87886 is being exploited in the wild and urges immediate patching of its cPanel/WHM and Plesk backup plugins.

CISA added CVE‑2026‑85706 to its actively exploited list, issuing a binding three‑day directive for federal agencies to patch the GitLab flaw.

CISA added five actively exploited CVEs for JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS to its KEV catalog, with federal patch deadlines in mid‑September 2026.