KDDI Breach Affects Other ISPs
NEOSEC enrichment — no mirror of the original source
Japanese telecommunications company KDDI has acknowledged that threat actors exploited a vulnerability in third-party software to gain access to a KDDI email system. KDDI detected the breach on June 17 and took steps to mitigate the situati
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
More on Affects
Other advisories
- Not ratedosv:CLEANSTART-2024-ZN39251Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7
- Not ratedosv:CLEANSTART-2024-BJ49824Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115
- Not ratedosv:CLEANSTART-2024-AP70260heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl
- Not ratedosv:CLEANSTART-2025-RN37173This affects the package jinja2 from 0
- Not ratedosv:CLEANSTART-2026-ZZ72297mutation XSS affects users calling bleach
- Not ratedosv:CLEANSTART-2026-QL40968vulnerability in the lsi53c895a device affects the latest version of qemu
- Not ratedosv:CLEANSTART-2026-FX55843Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0
- Not ratedosv:CLEANSTART-2026-NU07879This affects versions of the package exifreader before 4
Other news entries
- Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsNewsThe Hacker News
- Code-execution flaw in UEFI firmware affects most servers on planet EarthNewsArs Technica — Security
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python PackagesNewsSecurityWeek
- Node2Shell CVEsNewsFortinet PSIRT
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareNewsThe Hacker News
- PHP shares mitigation for new RCE vulnerability with no patchNewsBleepingComputer
- PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell PatchesNewsThe Hacker News
- Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesNewsThe Hacker News
ID