Security news
Security news
Vulnerabilities, fixed versions and publicly reported cyber incidents in Japan, organised from official announcements. When a story develops, its articles are linked together.
Subscribe by RSSLatest articles
-
Japan Data Breaches, Early November 2026: A Summary
NTT Docomo, Rohto, two insurers, TeamSpirit and JNSA disclosed breaches in early Nov 2026. The facts from their notices and 7 things to chec...
-
Arara Message Breach Update: About 81 Million Email Addresses
Arara's third report puts the figure at about 81 million addresses, including possibly taken ones. What changed, who disclosed, what is unkn...
-
SonicWall SSLVPN CVE-2026-19868: MFA Bypass and What to Do
SonicWall SSLVPN flaw may let attackers bypass SAML and MFA. Added to CISA KEV on 6 Nov 2026. Affected versions, fixed releases and what to...
-
Apache Tomcat Vulnerabilities, October 2026: 8 Flaws and Fixes
Eight Apache Tomcat flaws made public in October 2026. Which versions are affected, how to check LDAP, HTTP/2 and AJP settings, and how to u...
-
.NET 8 and 9 End of Support on 10 November 2026: What to Do
.NET 8 and .NET 9 reach end of support on 10 Nov 2026, as do PowerShell 7.4 and 7.5. How to check what you run, why .NET 10, and how to migr...
-
Movable Type Vulnerability JVN#91153973: Update or Mitigate Now
Movable Type flaw rated 9.4 (JVN#91153973): affected versions, fixed releases, workarounds if you cannot update yet, and 8.0 support ending...
-
WordPress CVE-2026-119977: Listed as Exploited, Update Now
CISA listed WordPress core flaw CVE-2026-119977 as exploited on 3 Nov 2026. Affected versions, fixed releases, how to update and how to chec...
-
Updated 8 November 2026
Japan Data Breaches, Oct–Nov 2026: What Companies Should Check
Nojima, Arara, IDC Frontier and Osaka Metropolitan University: what official notices say, what the cases share, and eight checks for your co...
-
Ivanti Connect Secure Zero-Days: Update Again and Investigate
Three Ivanti Connect Secure flaws were chained to gain root. Updated in October? Update again. Fixed versions, the limits of ICT, how to inv...
-
GitLab CVE-2026-97229 (CVSS 10): Exploited, Patch Now
GitLab CVE-2026-97229 (CVSS 10) is being exploited, CISA confirmed on 29 Oct 2026. Affected versions, what to update to, and why Ruby matter...
-
Linux Kernel Fragnesia (CVE-2026-46300): Exploited, Patch Now
Linux kernel flaw Fragnesia (CVE-2026-46300) is chained with PHP2shell to gain root. Fixed kernels by distribution, how to check, and what t...
-
Brotli Vulnerability CVE-2026-111497 (HTTP2Shell): What to Do
Brotli flaw CVE-2026-111497 (HTTP2Shell) is being exploited. Affected Node.js, .NET and Python versions, how to tell if you are at risk, and...
Unsure how to go about updating?
Talk to us about updating an older system or taking over its maintenance. The consultation is free.