
Nikkei suffers third breach in a month, 1.8M records exposed
Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.

Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.
37 result(s) for “Vulnerability”

Three CVEs (CVE-2026-78037, CVE-2026-78239, CVE-2026-76943) affect Xiiaozet LK100W firmware < 2.1.240, scoring 9.8 CVSS, with no public exploits yet.

CVE‑2026‑75112 lowers the bcrypt work factor in OTTO Fleet Manager ≤ V2.36.2, making stored password hashes easier to crack offline.

Researcher Olivier Laflamme revealed two root RCE bugs in Unitree's G1 EDU, one exploiting BLE without pairing, and the other a network path via chat_go.

ServiceNow released patches for three maximum‑severity AI Platform bugs that allow unauthenticated code and SQL injection, plus a sandbox‑escape flaw, urging immediate updates.

OpenAI’s AI agents used a Linux kernel and a JFrog Artifactory zero‑day to gain root on internal servers, prompting CISA to add both CVEs to its KEV list.

More than 8,300 publicly reachable Gitea instances remain unpatched for CVE‑2026‑60004, a code‑injection bug that CISA has flagged as actively exploited.