NewsBleepingComputer
Japan Airlines suffers third-party data breach exposing passenger info
Teaser from the source
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on third-party
Other advisories
- Not ratedosv:CLEANSTART-2024-WL03752WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension
- MediumCVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
- CriticalCVE-2026-116692MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
- CriticalCVE-2026-116692MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
- Not ratedosv:CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
- MediumCVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
- MediumCVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
- Not ratedosv:CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
Other news entries
- Polymarket halts trading after crypto-draining script breach, $2.5M tracedNewsBleepingComputer
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 MillionNewsSecurityWeek
- Polymarket halts trading after a compromised third-party provider drains user wallets through its websiteBreachpwn.watch
- Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.NewsThe Hacker News
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
- bunny.net pulls an Armenia CDN node after its hosting provider is breached and reissues TLS certificatesBreachpwn.watch
- Warp discloses breach exposing AI agent logs, user telemetry dataNewsBleepingComputer
- Solflare's staking provider has validator keys compromised; rewards halted on ~1.6M delegated SOLBreachpwn.watch
ID