https://itdef.net/ja/learn/mybrands-data-breach-2026ITDja2026-11-02T11:00:00+09:00求人サイトMyBRANDSの不正アクセスと個人情報漏えいのおそれ（最大約13.5万アカウント）：氏名・連絡先・職歴などが対象の求職者と企業担当者がやること https://itdef.net/ja/learn/saga-university-ransomware-2026ITDja2026-11-02T11:00:00+09:00佐賀大学のランサムウェア被害（学生・教職員・元学生などの個人情報が流出した可能性、約8万人分、患者情報も）：氏名・住所・パスワードなどが対象の人がやること https://itdef.net/ja/learn/wordpress-7-1-4-security-release-rceITDja2026-11-02T11:00:00+09:00WordPress 7.1.4 脆弱性 CVE-2026-119977｜更新中に遠隔からコードを実行されうる欠陥の修正と、自動更新・バージョンの確認 https://itdef.net/ja/learn/binance-crypto-theft-2026ITDja2026-10-31Binanceの暗号資産流出（約63億ドル）：利用者の資産は補償されるのか、利用者がやること https://itdef.net/ja/learn/chainalysis-security-incident-2026ITDja2026-11-01T10:40:00+09:00Chainalysisのセキュリティインシデント（2026年10月）：氏名・メール・役割ラベルなどがアクセスされ、顧客がやること https://itdef.net/ja/learn/club-tourism-data-breach-2026ITDja2026-11-01T10:40:00+09:00クラブツーリズムの不正アクセスと個人情報漏えいのおそれ（対象約432万件）：氏名・住所・電話番号・緊急連絡先などが対象の会員がやること https://itdef.net/ja/learn/linux-kernel-tcp-cve-2026-98432ITDja2026-11-01T10:40:00+09:00Linuxカーネル脆弱性 CVE-2026-98432：ネットワーク越しに突かれうるTCPの欠陥（CVSS 9.8）。修正版を入れて再起動し、MPTCPも確認 https://itdef.net/ja/learn/northflank-security-incident-ai-api-keys-2026ITDja2026-11-01T10:40:00+09:00Northflankのセキュリティインシデント（2026年10月）：保存された環境変数は復号されたと想定、AI APIキーの不正利用報告も https://itdef.net/ja/learn/ragtag-data-breach-2026ITDja2026-11-01T10:40:00+09:00ワールド子会社ティンパンアレイ（報道ではラグタグ運営）の不正アクセス（延べ約120万件）：氏名・住所・電話番号などが漏れた可能性と、会員がやること https://itdef.net/ja/learn/revolve-payment-card-data-breach-2026ITDja2026-11-01T10:40:00+09:00Revolveの顧客アカウント情報漏えい：保存カード番号・有効期限にアクセス（テキサス州で12万7,200人）｜利用者が今日やること https://itdef.net/ja/learn/aomei-backupper-update-server-tampering-2026ITDja2026-10-31AOMEI Backupperの更新サーバー改ざん（2026年4〜7月）：対象になりうる人、日時、自分のPCの確かめ方 https://itdef.net/ja/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDja2026-10-31Cisco Catalyst SD-WAN Managerの脆弱性 CVE-2026-76504：ログインなしで管理者として操作される、悪用を確認（修正版へ更新） https://itdef.net/ja/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDja2026-10-31Cloudflare Workers AIで他の顧客のデータが155件の応答に混入（GLM 5.3）：ホスト型AIを使うチームが確認すること https://itdef.net/ja/learn/cursor-fake-claude-code-extension-backdoor-2026ITDja2026-10-31Cursorの拡張機能マーケットプレイスに改ざんされた「Claude Code」拡張（10月29日・約11時間）：SSHバックドアの確認方法 https://itdef.net/ja/learn/dreamhost-password-reset-incident-2026ITDja2026-10-31DreamHostのインシデント（2026年10月）：一部のメール・FTP・SFTPのパスワードを再設定、契約者が今日やること https://itdef.net/ja/learn/drupal-commerce-core-cve-2026-118539ITDja2026-10-31Drupal Commerce Coreの脆弱性 CVE-2026-118539：ログインなしでアクセス制御を回避、悪用あり（8.x-2.41・3.3.13へ更新） https://itdef.net/ja/learn/ets-california-student-data-breach-2026ITDja2026-10-31ETS（カリフォルニア州の統一テスト）の生徒情報の流出：障害・504・テスト結果が複製、家族がやること https://itdef.net/ja/learn/genesys-data-breach-2026ITDja2026-10-31Genesysの社内システムへの不正アクセス（2026年10月）：顧客・見込み顧客の連絡先が対象、Genesys Cloudは影響なし、利用企業がやること https://itdef.net/ja/learn/gettiis-ticket-data-breach-2026ITDja2026-10-31GETTIISの会員情報漏えい（会員ID31万7,971件）：何が漏れたかと、会員がやること https://itdef.net/ja/learn/ivanti-connect-secure-cve-2026-111357ITDja2026-10-31Ivanti Connect Secureの脆弱性 CVE-2026-111357・CVE-2026-118527：米CISAがKEVに追加、10月の攻撃にどう備えるか https://itdef.net/ja/learn/matsuya-app-data-breach-2026ITDja2026-10-31松屋公式アプリ管理システムへの不正アクセス（237万7,127件ほか）：氏名・電話番号・届け先住所が漏れた会員がやること https://itdef.net/ja/learn/muji-app-data-breach-2026ITDja2026-10-31良品計画（無印良品）MUJIアプリへの不正アクセス（最大約2,726万件）：メールアドレス・生年月日・性別が漏れた可能性と、利用者がやること https://itdef.net/ja/learn/opencode-console-api-key-breach-2026ITDja2026-10-31OpenCode Consoleへの不正アクセス（2026年10月、Console利用者の1.4%）：外部AI事業者のAPIキーが漏れた可能性と、利用者がやること https://itdef.net/ja/learn/orkes-conductor-cve-2026-58138ITDja2026-10-31Orkes Conductorの脆弱性 CVE-2026-58138：ログインなしでOSのコマンドを実行される、攻撃の試みを観測（3.30.2以降へ更新） https://itdef.net/ja/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDja2026-10-31Paradigm Healthcare Services（Medi-Calの請求業務）の情報漏えい：会員番号・生年月日が閲覧された可能性、会員がやること https://itdef.net/ja/learn/photon-health-metabase-data-breach-2026ITDja2026-10-31米Photon Healthの情報漏えい（分析ツールの脆弱性）：氏名・住所・電話番号・生年月日・処方薬情報と、対象者が今日やること https://itdef.net/ja/learn/plex-media-server-plex2shell-cve-2026-96652ITDja2026-10-31Plex2Shell：Plex Media Serverの4つの脆弱性が悪用されている（1.43.3.10861以降へ更新） https://itdef.net/ja/learn/polymarket-third-party-script-incident-2026ITDja2026-10-31Polymarketで取引停止、第三者提供のスクリプトが侵害：利用者とサイト運営者がやること https://itdef.net/ja/learn/ricardo-data-breach-2026ITDja2026-10-31Ricardo（スイスのマーケットプレイス）の情報漏えい（約89万アカウント）：氏名・住所・電話番号が対象、利用者がやること https://itdef.net/ja/learn/sharepoint-server-cve-2026-65660ITDja2026-10-31SharePoint Serverの脆弱性 CVE-2026-65660：ログインした利用者にコードを実行される、悪用を確認（2026年8月の更新を適用） https://itdef.net/ja/learn/trezor-hardware-wallet-implant-report-2026ITDja2026-10-31Trezorが、東南アジアの元認定販売店で買ったSafe 5に不審な基板が入っていたとの報告を公表（未確認）：所有者がやること https://itdef.net/ja/learn/yakult-website-data-breach-2026ITDja2026-10-31ヤクルト本社の公式サイトへの不正アクセス（約4万件）：氏名・住所・電話・メール・問い合わせ内容が漏れた人がやること https://itdef.net/ja/learn/zeabur-security-incident-2026ITDja2026-10-31Zeaburのセキュリティインシデント（2026年10月、環境変数約322万件が読み取り）：差し替える秘密と、利用者がやること https://itdef.net/en/learn/mybrands-data-breach-2026ITDen2026-11-02T11:00:00+09:00MyBRANDS Job Site Unauthorized Access and Possible Personal Data Leak (Up to About 135,000 Accounts): What Job Seekers and Employer Contacts With Names, Contact Details and Work History Should Do https://itdef.net/en/learn/saga-university-ransomware-2026ITDen2026-11-02T11:00:00+09:00Saga University ransomware attack (personal data of students, staff and former students may have leaked, about 80,000 people, plus patient information): what people whose names, addresses and passwords are listed should do https://itdef.net/en/learn/wordpress-7-1-4-security-release-rceITDen2026-11-02T11:00:00+09:00WordPress 7.1.4 flaw CVE-2026-119977: a core-update race that can lead to remote code execution is fixed; check your version and auto-updates https://itdef.net/en/learn/binance-crypto-theft-2026ITDen2026-10-31Binance crypto theft (about US$6.3 billion): are user funds covered, and what account holders should do https://itdef.net/en/learn/chainalysis-security-incident-2026ITDen2026-11-01T10:40:00+09:00Chainalysis Security Incident (October 2026): Names, Emails and Role Labels Accessed, and What Customers Should Do https://itdef.net/en/learn/club-tourism-data-breach-2026ITDen2026-11-01T10:40:00+09:00Club Tourism Unauthorized Access and Possible Personal Data Leak (About 4.32 Million Records): What Members With Names, Addresses, Phone Numbers and Emergency Contacts Should Do https://itdef.net/en/learn/linux-kernel-tcp-cve-2026-98432ITDen2026-11-01T10:40:00+09:00Linux kernel CVE-2026-98432: a network-triggered TCP use-after-free (CVSS 9.8); install the fixed kernel, reboot, and check MPTCP https://itdef.net/en/learn/northflank-security-incident-ai-api-keys-2026ITDen2026-11-01T10:40:00+09:00Northflank Security Incident (October 2026): Stored Environment Variables Treated as Decrypted, AI API Key Misuse Reported https://itdef.net/en/learn/ragtag-data-breach-2026ITDen2026-11-01T10:40:00+09:00World subsidiary Tin Pan Alley (RAGTAG operator, per press) breach (about 1.2 million records in total): names, addresses and phone numbers may have leaked — what members should do https://itdef.net/en/learn/revolve-payment-card-data-breach-2026ITDen2026-11-01T10:40:00+09:00Revolve customer account breach: saved card numbers and expiry dates accessed (127,200 Texans listed) — what customers should do https://itdef.net/en/learn/aomei-backupper-update-server-tampering-2026ITDen2026-10-31AOMEI Backupper Update Server Tampered With (April to July 2026): Who May Be Affected, the Dates, and How to Check Your PC https://itdef.net/en/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDen2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504: admin access without a login, exploited (upgrade to a fixed release) https://itdef.net/en/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDen2026-10-31Cloudflare Workers AI Returned Other Customers' Data in 155 Responses (GLM 5.3): What Teams Using Hosted AI Should Check https://itdef.net/en/learn/cursor-fake-claude-code-extension-backdoor-2026ITDen2026-10-31Tampered 'Claude Code' extension on the Cursor marketplace (Oct 29, about 11 hours): how to check for an SSH backdoor https://itdef.net/en/learn/dreamhost-password-reset-incident-2026ITDen2026-10-31DreamHost incident (October 2026): passwords of some email, FTP and SFTP users reset, and what account owners should do https://itdef.net/en/learn/drupal-commerce-core-cve-2026-118539ITDen2026-10-31Drupal Commerce Core CVE-2026-118539: unauthenticated access bypass, actively exploited (update to 8.x-2.41 or 3.3.13) https://itdef.net/en/learn/ets-california-student-data-breach-2026ITDen2026-10-31ETS California Student Data Breach: Disability, 504 and Test Data Copied, and What Families Should Do https://itdef.net/en/learn/genesys-data-breach-2026ITDen2026-10-31Genesys Internal Systems Breach (October 2026): Systems Holding Customer Contact Data Accessed, Platforms Not Affected, and What Customers Should Do https://itdef.net/en/learn/gettiis-ticket-data-breach-2026ITDen2026-10-31GETTIIS Member Data Breach (317,971 member IDs): What Leaked and What Members Should Do https://itdef.net/en/learn/ivanti-connect-secure-cve-2026-111357ITDen2026-10-31Ivanti Connect Secure CVE-2026-111357 and CVE-2026-118527: two more flaws added to CISA KEV (what to do about the October attacks) https://itdef.net/en/learn/matsuya-app-data-breach-2026ITDen2026-10-31Matsuya app management system breach (2,377,127 records plus app members): names, phone numbers and delivery addresses leaked — what members should do https://itdef.net/en/learn/muji-app-data-breach-2026ITDen2026-10-31Ryohin Keikaku (MUJI) app breach (up to about 27.26 million records): emails, dates of birth and gender may have leaked — what users should do https://itdef.net/en/learn/opencode-console-api-key-breach-2026ITDen2026-10-31OpenCode Console Breach (October 2026, 1.4% of Console Users): AI Provider API Keys Possibly Exposed, and What to Do https://itdef.net/en/learn/orkes-conductor-cve-2026-58138ITDen2026-10-31Orkes Conductor CVE-2026-58138: unauthenticated OS command execution, with attack attempts observed (update to 3.30.2 or later) https://itdef.net/en/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDen2026-10-31Paradigm Healthcare Services Data Breach: Medi-Cal Member IDs and Birth Dates May Have Been Accessed, and What Members Should Do https://itdef.net/en/learn/photon-health-metabase-data-breach-2026ITDen2026-10-31Photon Health data breach (analytics-tool flaw): names, addresses, phone numbers, dates of birth and prescription information — what affected patients should do https://itdef.net/en/learn/plex-media-server-plex2shell-cve-2026-96652ITDen2026-10-31Plex2Shell: four Plex Media Server CVEs exploited in the wild (update to 1.43.3.10861 or later) https://itdef.net/en/learn/polymarket-third-party-script-incident-2026ITDen2026-10-31Polymarket Trading Halted After a Third-Party Script Was Compromised: What Users and Site Operators Should Do https://itdef.net/en/learn/ricardo-data-breach-2026ITDen2026-10-31Ricardo (Swiss Marketplace) Data Breach, About 890,000 Accounts: Names, Addresses and Phone Numbers Exposed, and What Users Should Do https://itdef.net/en/learn/sharepoint-server-cve-2026-65660ITDen2026-10-31SharePoint Server CVE-2026-65660: code execution by a logged-in user, exploited (install the August 2026 updates) https://itdef.net/en/learn/trezor-hardware-wallet-implant-report-2026ITDen2026-10-31Trezor reports a possible hardware implant in a Safe 5 from a former reseller (unconfirmed): what owners should do https://itdef.net/en/learn/yakult-website-data-breach-2026ITDen2026-10-31Yakult Honsha website breach (about 40,000 records): names, addresses, phones, emails and inquiry contents leaked — what affected people should do https://itdef.net/en/learn/zeabur-security-incident-2026ITDen2026-10-31Zeabur Security Incident (October 2026, 3.22 Million Environment Variables Read): Which Secrets to Rotate and What Users Should Do https://itdef.net/zh-CN/learn/mybrands-data-breach-2026ITDzh-cn2026-11-02T11:00:00+09:00求职网站MyBRANDS遭未经授权访问，个人信息可能泄露（最多约13.5万个账户）：姓名、联系方式和工作经历可能外泄的求职者和企业联系人应采取的措施 https://itdef.net/zh-CN/learn/saga-university-ransomware-2026ITDzh-cn2026-11-02T11:00:00+09:00佐贺大学勒索软件攻击（学生、教职员工和校友的个人信息可能泄露，约8万人，另有患者信息）：姓名、地址和密码在列的人应采取的措施 https://itdef.net/zh-CN/learn/wordpress-7-1-4-security-release-rceITDzh-cn2026-11-02T11:00:00+09:00WordPress 7.1.4 漏洞 CVE-2026-119977：可能导致远程代码执行的核心更新竞态条件已修复；请检查版本与自动更新 https://itdef.net/zh-CN/learn/binance-crypto-theft-2026ITDzh-cn2026-10-31Binance 加密货币被盗（约 63 亿美元）：用户资金是否有保障，账户持有人该怎么做 https://itdef.net/zh-CN/learn/chainalysis-security-incident-2026ITDzh-cn2026-11-01T10:40:00+09:00Chainalysis安全事件（2026年10月）：姓名、电子邮件和角色标签被访问，客户应如何应对 https://itdef.net/zh-CN/learn/club-tourism-data-breach-2026ITDzh-cn2026-11-01T10:40:00+09:00Club Tourism遭未经授权访问，个人信息可能外泄（约432万条记录）：姓名、地址、电话号码和紧急联系人信息可能外泄，会员应如何应对 https://itdef.net/zh-CN/learn/linux-kernel-tcp-cve-2026-98432ITDzh-cn2026-11-01T10:40:00+09:00Linux内核CVE-2026-98432：可通过网络触发的TCP释放后使用漏洞（CVSS 9.8）；请安装已修复的内核、重启并检查MPTCP https://itdef.net/zh-CN/learn/northflank-security-incident-ai-api-keys-2026ITDzh-cn2026-11-01T10:40:00+09:00Northflank安全事件（2026年10月）：存储的环境变量应视为已被解密，有用户报告AI API密钥遭滥用 https://itdef.net/zh-CN/learn/ragtag-data-breach-2026ITDzh-cn2026-11-01T10:40:00+09:00World子公司Tin Pan Alley（据媒体报道为RAGTAG运营方）数据泄露（合计约120万条记录）：姓名、地址和电话号码可能外泄，会员应如何应对 https://itdef.net/zh-CN/learn/revolve-payment-card-data-breach-2026ITDzh-cn2026-11-01T10:40:00+09:00Revolve客户账户数据泄露：已保存的银行卡号和有效期被访问（得克萨斯州列出127,200人），客户应如何应对 https://itdef.net/zh-CN/learn/aomei-backupper-update-server-tampering-2026ITDzh-cn2026-10-31AOMEI Backupper 更新服务器遭篡改（2026 年 4 月至 7 月）：谁可能受影响、具体时间，以及如何检查您的电脑 https://itdef.net/zh-CN/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDzh-cn2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504：无需登录即可获得管理员访问权限，已被利用（请升级到已修复版本） https://itdef.net/zh-CN/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDzh-cn2026-10-31Cloudflare Workers AI 在 155 条响应中返回了其他客户的数据（GLM 5.3）：使用托管 AI 的团队应检查什么 https://itdef.net/zh-CN/learn/cursor-fake-claude-code-extension-backdoor-2026ITDzh-cn2026-10-31Cursor 市场上被篡改的“Claude Code”扩展（10 月 29 日，约 11 小时）：如何检查 SSH 后门 https://itdef.net/zh-CN/learn/dreamhost-password-reset-incident-2026ITDzh-cn2026-10-31DreamHost 事件（2026年10月）：部分邮件、FTP 和 SFTP 用户的密码被重置，账户所有者应做什么 https://itdef.net/zh-CN/learn/drupal-commerce-core-cve-2026-118539ITDzh-cn2026-10-31Drupal Commerce Core CVE-2026-118539：无需身份验证的访问绕过漏洞，已被利用（请更新到 8.x-2.41 或 3.3.13） https://itdef.net/zh-CN/learn/ets-california-student-data-breach-2026ITDzh-cn2026-10-31ETS加利福尼亚州学生数据泄露：残障、504和考试数据被复制，家庭应该怎么做 https://itdef.net/zh-CN/learn/genesys-data-breach-2026ITDzh-cn2026-10-31Genesys 内部系统遭入侵（2026 年 10 月）：存有客户联系方式的系统遭访问，平台未受影响，客户企业应如何应对 https://itdef.net/zh-CN/learn/gettiis-ticket-data-breach-2026ITDzh-cn2026-10-31GETTIIS 会员数据泄露（317,971 个会员 ID）：泄露了什么，会员应该怎么做 https://itdef.net/zh-CN/learn/ivanti-connect-secure-cve-2026-111357ITDzh-cn2026-10-31Ivanti Connect Secure CVE-2026-111357 和 CVE-2026-118527：另外两个漏洞被加入 CISA KEV（针对10月攻击该怎么做） https://itdef.net/zh-CN/learn/matsuya-app-data-breach-2026ITDzh-cn2026-10-31Matsuya 应用管理系统遭入侵（2,377,127 条记录及应用会员）：姓名、电话号码和配送地址外泄——会员应该怎么做 https://itdef.net/zh-CN/learn/muji-app-data-breach-2026ITDzh-cn2026-10-31良品计划（MUJI）应用数据泄露（最多约 2726 万条记录）：邮箱地址、出生日期和性别可能外泄，用户应如何应对 https://itdef.net/zh-CN/learn/opencode-console-api-key-breach-2026ITDzh-cn2026-10-31OpenCode Console 安全事件（2026 年 10 月，1.4% 的 Console 用户）：AI 服务商 API 密钥可能已暴露，以及该怎么做 https://itdef.net/zh-CN/learn/orkes-conductor-cve-2026-58138ITDzh-cn2026-10-31Orkes Conductor CVE-2026-58138：无需身份验证即可执行操作系统命令，已观测到攻击尝试（请更新到 3.30.2 或更高版本） https://itdef.net/zh-CN/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDzh-cn2026-10-31Paradigm Healthcare Services数据泄露：Medi-Cal会员编号和出生日期可能被访问，会员应该怎么做 https://itdef.net/zh-CN/learn/photon-health-metabase-data-breach-2026ITDzh-cn2026-10-31Photon Health 数据泄露（分析工具漏洞）：姓名、地址、电话号码、出生日期和处方信息，受影响的患者应如何应对 https://itdef.net/zh-CN/learn/plex-media-server-plex2shell-cve-2026-96652ITDzh-cn2026-10-31Plex2Shell：Plex Media Server 的四个 CVE 已在野外被利用（请更新到 1.43.3.10861 或更高版本） https://itdef.net/zh-CN/learn/polymarket-third-party-script-incident-2026ITDzh-cn2026-10-31Polymarket 因第三方脚本遭入侵而暂停交易：用户和网站运营者应该怎么做 https://itdef.net/zh-CN/learn/ricardo-data-breach-2026ITDzh-cn2026-10-31Ricardo（瑞士在线交易平台）数据泄露，约 89 万个账户：姓名、地址和电话号码被暴露，用户应如何应对 https://itdef.net/zh-CN/learn/sharepoint-server-cve-2026-65660ITDzh-cn2026-10-31SharePoint Server CVE-2026-65660：已登录用户可执行代码，已被利用（请安装2026年8月的更新） https://itdef.net/zh-CN/learn/trezor-hardware-wallet-implant-report-2026ITDzh-cn2026-10-31Trezor 称曾有报告指某前经销商售出的 Safe 5 内可能存在硬件植入物（尚未证实）：持有者应如何应对 https://itdef.net/zh-CN/learn/yakult-website-data-breach-2026ITDzh-cn2026-10-31养乐多本社网站数据泄露（约 4 万条记录）：姓名、地址、电话、邮箱和咨询内容外泄，受影响者应如何应对 https://itdef.net/zh-CN/learn/zeabur-security-incident-2026ITDzh-cn2026-10-31Zeabur 安全事件（2026 年 10 月，322 万条环境变量被读取）：哪些密钥需要轮换，用户该怎么做 https://itdef.net/zh-TW/learn/mybrands-data-breach-2026ITDzh-tw2026-11-02T11:00:00+09:00求職網站 MyBRANDS 遭未經授權存取，個人資料可能外洩（最多約 13.5 萬個帳號）：姓名、聯絡方式與工作經歷可能外流的求職者與企業聯絡人該怎麼做 https://itdef.net/zh-TW/learn/saga-university-ransomware-2026ITDzh-tw2026-11-02T11:00:00+09:00佐賀大學勒索軟體攻擊（學生、教職員與校友的個人資料可能外洩，約 8 萬人，另有病患資訊）：姓名、地址與密碼在列者該怎麼做 https://itdef.net/zh-TW/learn/wordpress-7-1-4-security-release-rceITDzh-tw2026-11-02T11:00:00+09:00WordPress 7.1.4 漏洞 CVE-2026-119977：可能導致遠端程式碼執行的核心更新競態條件已修補；請檢查版本與自動更新 https://itdef.net/zh-TW/learn/binance-crypto-theft-2026ITDzh-tw2026-10-31Binance 加密貨幣遭竊（約 63 億美元）：使用者資金是否有保障，帳號持有人該怎麼做 https://itdef.net/zh-TW/learn/chainalysis-security-incident-2026ITDzh-tw2026-11-01T10:40:00+09:00Chainalysis 資安事件（2026年10月）：姓名、電子郵件與角色標籤遭存取，客戶應採取的行動 https://itdef.net/zh-TW/learn/club-tourism-data-breach-2026ITDzh-tw2026-11-01T10:40:00+09:00Club Tourism 遭未經授權存取，個人資料可能外洩（約 432 萬筆）：姓名、地址、電話與緊急聯絡人資料可能外洩，會員應採取的行動 https://itdef.net/zh-TW/learn/linux-kernel-tcp-cve-2026-98432ITDzh-tw2026-11-01T10:40:00+09:00Linux 核心 CVE-2026-98432：可透過網路觸發的 TCP 釋放後使用漏洞（CVSS 9.8）；請安裝已修復的核心、重新啟動並檢查 MPTCP https://itdef.net/zh-TW/learn/northflank-security-incident-ai-api-keys-2026ITDzh-tw2026-11-01T10:40:00+09:00Northflank 資安事件（2026年10月）：儲存的環境變數應視為已被解密，有使用者回報 AI API 金鑰遭濫用 https://itdef.net/zh-TW/learn/ragtag-data-breach-2026ITDzh-tw2026-11-01T10:40:00+09:00World 子公司 Tin Pan Alley（據媒體報導為 RAGTAG 營運方）資料外洩（合計約 120 萬筆）：姓名、地址與電話可能外洩，會員應採取的行動 https://itdef.net/zh-TW/learn/revolve-payment-card-data-breach-2026ITDzh-tw2026-11-01T10:40:00+09:00Revolve 客戶帳號資料外洩：已儲存的信用卡號與有效期限遭存取（德州列出 127,200 人），客戶應採取的行動 https://itdef.net/zh-TW/learn/aomei-backupper-update-server-tampering-2026ITDzh-tw2026-10-31AOMEI Backupper 更新伺服器遭竄改（2026年4月至7月）：誰可能受影響、確切時段，以及如何檢查您的電腦 https://itdef.net/zh-TW/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDzh-tw2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504：無需登入即可取得管理員存取權，已遭利用（請升級至已修補版本） https://itdef.net/zh-TW/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDzh-tw2026-10-31Cloudflare Workers AI 在 155 則回應中回傳了其他客戶的資料（GLM 5.3）：使用託管 AI 的團隊應檢查什麼 https://itdef.net/zh-TW/learn/cursor-fake-claude-code-extension-backdoor-2026ITDzh-tw2026-10-31Cursor 市場上被篡改的「Claude Code」擴充套件（10月29日，約11小時）：如何檢查 SSH 後門 https://itdef.net/zh-TW/learn/dreamhost-password-reset-incident-2026ITDzh-tw2026-10-31DreamHost 事件（2026年10月）：部分郵件、FTP 與 SFTP 使用者的密碼遭重設，帳戶擁有者該做什麼 https://itdef.net/zh-TW/learn/drupal-commerce-core-cve-2026-118539ITDzh-tw2026-10-31Drupal Commerce Core CVE-2026-118539：無需身分驗證的存取繞過漏洞，已遭利用（請更新至 8.x-2.41 或 3.3.13） https://itdef.net/zh-TW/learn/ets-california-student-data-breach-2026ITDzh-tw2026-10-31ETS 加州學生資料外洩：身心障礙、504 與考試資料遭複製，家庭該怎麼做 https://itdef.net/zh-TW/learn/genesys-data-breach-2026ITDzh-tw2026-10-31Genesys 內部系統遭入侵（2026年10月）：存有客戶聯絡方式的系統遭存取，平台未受影響，客戶企業應如何因應 https://itdef.net/zh-TW/learn/gettiis-ticket-data-breach-2026ITDzh-tw2026-10-31GETTIIS 會員資料外洩（317,971 個會員 ID）：外洩了什麼，會員應該怎麼做 https://itdef.net/zh-TW/learn/ivanti-connect-secure-cve-2026-111357ITDzh-tw2026-10-31Ivanti Connect Secure CVE-2026-111357 與 CVE-2026-118527：另外兩個漏洞被加入 CISA KEV（針對10月攻擊該怎麼做） https://itdef.net/zh-TW/learn/matsuya-app-data-breach-2026ITDzh-tw2026-10-31Matsuya 應用程式管理系統遭入侵（2,377,127 筆紀錄及應用程式會員）：姓名、電話號碼與配送地址外洩——會員應該怎麼做 https://itdef.net/zh-TW/learn/muji-app-data-breach-2026ITDzh-tw2026-10-31良品計劃（MUJI）應用資料外洩（最多約2726萬筆紀錄）：電子郵件地址、出生日期和性別可能外洩，使用者應如何應對 https://itdef.net/zh-TW/learn/opencode-console-api-key-breach-2026ITDzh-tw2026-10-31OpenCode Console 資安事件（2026年10月，1.4%的 Console 使用者）：AI 供應商 API 金鑰可能外洩，以及該怎麼做 https://itdef.net/zh-TW/learn/orkes-conductor-cve-2026-58138ITDzh-tw2026-10-31Orkes Conductor CVE-2026-58138：無需身分驗證即可執行作業系統指令，已觀測到攻擊嘗試（請更新至 3.30.2 或更新版本） https://itdef.net/zh-TW/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDzh-tw2026-10-31Paradigm Healthcare Services 資料外洩：Medi-Cal 會員編號與出生日期可能遭存取，會員該怎麼做 https://itdef.net/zh-TW/learn/photon-health-metabase-data-breach-2026ITDzh-tw2026-10-31Photon Health 資料外洩（分析工具漏洞）：姓名、地址、電話號碼、出生日期和處方資訊，受影響的患者應如何應對 https://itdef.net/zh-TW/learn/plex-media-server-plex2shell-cve-2026-96652ITDzh-tw2026-10-31Plex2Shell：Plex Media Server 的四個 CVE 已遭實際利用（請更新至 1.43.3.10861 或更新版本） https://itdef.net/zh-TW/learn/polymarket-third-party-script-incident-2026ITDzh-tw2026-10-31Polymarket 因第三方指令碼遭入侵而暫停交易：使用者與網站營運者應該怎麼做 https://itdef.net/zh-TW/learn/ricardo-data-breach-2026ITDzh-tw2026-10-31Ricardo（瑞士線上交易平台）資料外洩，約89萬個帳戶：姓名、地址與電話號碼遭暴露，使用者應如何因應 https://itdef.net/zh-TW/learn/sharepoint-server-cve-2026-65660ITDzh-tw2026-10-31SharePoint Server CVE-2026-65660：已登入的使用者可執行程式碼，已遭利用（請安裝2026年8月的更新） https://itdef.net/zh-TW/learn/trezor-hardware-wallet-implant-report-2026ITDzh-tw2026-10-31Trezor 稱曾有報告指某前經銷商售出的 Safe 5內可能存在硬體植入物（尚未證實）：持有者應如何應對 https://itdef.net/zh-TW/learn/yakult-website-data-breach-2026ITDzh-tw2026-10-31養樂多本社網站資料外洩（約4萬筆紀錄）：姓名、地址、電話、電子郵件和諮詢內容外洩，受影響者應如何應對 https://itdef.net/zh-TW/learn/zeabur-security-incident-2026ITDzh-tw2026-10-31Zeabur 資安事件（2026年10月，322萬筆環境變數遭讀取）：該輪替哪些密鑰、使用者該怎麼做 https://itdef.net/ru/learn/mybrands-data-breach-2026ITDru2026-11-02T11:00:00+09:00Несанкционированный доступ к сайту вакансий MyBRANDS и возможная утечка персональных данных (до примерно 135 000 аккаунтов): что делать соискателям и представителям работодателей, чьи имена, контакты и трудовая история под угрозой https://itdef.net/ru/learn/saga-university-ransomware-2026ITDru2026-11-02T11:00:00+09:00Атака программы-вымогателя на Университет Сага (персональные данные студентов, сотрудников и выпускников, около 80 000 человек, и сведения о пациентах могли утечь): что делать тем, чьи имена, адреса и пароли указаны в перечне https://itdef.net/ru/learn/wordpress-7-1-4-security-release-rceITDru2026-11-02T11:00:00+09:00Уязвимость WordPress 7.1.4 CVE-2026-119977: исправлена гонка при обновлении ядра, которая может привести к удаленному выполнению кода. Проверьте версию и автообновления https://itdef.net/ru/learn/binance-crypto-theft-2026ITDru2026-10-31Кража криптовалюты у Binance (около 6,3 млрд долларов США): покрыты ли средства пользователей и что делать владельцам аккаунтов https://itdef.net/ru/learn/chainalysis-security-incident-2026ITDru2026-11-01T10:40:00+09:00Инцидент безопасности Chainalysis (октябрь 2026): доступ к именам, e-mail и меткам ролей, что делать клиентам https://itdef.net/ru/learn/club-tourism-data-breach-2026ITDru2026-11-01T10:40:00+09:00Несанкционированный доступ в Club Tourism и возможная утечка персональных данных (около 4,32 млн записей): что делать участникам, чьи имена, адреса, телефоны и экстренные контакты могли попасть в утечку https://itdef.net/ru/learn/linux-kernel-tcp-cve-2026-98432ITDru2026-11-01T10:40:00+09:00Ядро Linux CVE-2026-98432: use-after-free в TCP, вызываемый по сети (CVSS 9.8). Установите исправленное ядро, перезагрузитесь и проверьте MPTCP https://itdef.net/ru/learn/northflank-security-incident-ai-api-keys-2026ITDru2026-11-01T10:40:00+09:00Инцидент безопасности Northflank (октябрь 2026): сохранённые переменные окружения считаются расшифрованными, сообщается о неправомерном использовании ключей API ИИ https://itdef.net/ru/learn/ragtag-data-breach-2026ITDru2026-11-01T10:40:00+09:00Утечка у дочерней компании World — Tin Pan Alley (по сообщениям прессы, оператор RAGTAG), всего около 1,2 млн записей: имена, адреса и телефоны могли утечь, что делать участникам https://itdef.net/ru/learn/revolve-payment-card-data-breach-2026ITDru2026-11-01T10:40:00+09:00Взлом клиентских аккаунтов Revolve: доступ к сохранённым номерам карт и срокам действия (в списке 127 200 жителей Техаса) — что делать клиентам https://itdef.net/ru/learn/aomei-backupper-update-server-tampering-2026ITDru2026-10-31Подмена на сервере обновлений AOMEI Backupper (апрель–июль 2026): кто может быть затронут, даты и как проверить свой ПК https://itdef.net/ru/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDru2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504: доступ администратора без входа, уязвимость эксплуатируется (обновитесь до исправленного выпуска) https://itdef.net/ru/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDru2026-10-31Cloudflare Workers AI вернул данные других клиентов в 155 ответах (GLM 5.3): что проверить командам, использующим размещенный ИИ https://itdef.net/ru/learn/cursor-fake-claude-code-extension-backdoor-2026ITDru2026-10-31Подменённое расширение «Claude Code» в маркетплейсе Cursor (29 октября, около 11 часов): как проверить наличие SSH-бэкдора https://itdef.net/ru/learn/dreamhost-password-reset-incident-2026ITDru2026-10-31Инцидент в DreamHost (октябрь 2026): пароли части пользователей почты, FTP и SFTP сброшены — что делать владельцам аккаунтов https://itdef.net/ru/learn/drupal-commerce-core-cve-2026-118539ITDru2026-10-31Drupal Commerce Core CVE-2026-118539: обход доступа без аутентификации, активно эксплуатируется (обновитесь до 8.x-2.41 или 3.3.13) https://itdef.net/ru/learn/ets-california-student-data-breach-2026ITDru2026-10-31Утечка данных учащихся Калифорнии из ETS: скопированы сведения об инвалидности, плане 504 и тестах, и что делать семьям https://itdef.net/ru/learn/genesys-data-breach-2026ITDru2026-10-31Взлом внутренних систем Genesys (октябрь 2026 года): получен доступ к системам с контактными данными клиентов, платформы не затронуты, и что делать клиентам https://itdef.net/ru/learn/gettiis-ticket-data-breach-2026ITDru2026-10-31Утечка данных участников GETTIIS (317 971 идентификатор участника): что утекло и что делать участникам https://itdef.net/ru/learn/ivanti-connect-secure-cve-2026-111357ITDru2026-10-31Ivanti Connect Secure CVE-2026-111357 и CVE-2026-118527: еще две уязвимости добавлены в CISA KEV (что делать после октябрьских атак) https://itdef.net/ru/learn/matsuya-app-data-breach-2026ITDru2026-10-31Утечка из системы управления приложением Matsuya (2 377 127 записей плюс участники приложения): имена, телефоны и адреса доставки, и что делать участникам https://itdef.net/ru/learn/muji-app-data-breach-2026ITDru2026-10-31Утечка из приложения Ryohin Keikaku (MUJI) (до примерно 27,26 млн записей): адреса эл. почты, даты рождения и пол могли утечь — что делать пользователям https://itdef.net/ru/learn/opencode-console-api-key-breach-2026ITDru2026-10-31Взлом OpenCode Console (октябрь 2026, 1,4% пользователей Console): возможно раскрыты API-ключи поставщиков ИИ, и что делать https://itdef.net/ru/learn/orkes-conductor-cve-2026-58138ITDru2026-10-31Orkes Conductor CVE-2026-58138: выполнение команд ОС без аутентификации, зафиксированы попытки атак (обновитесь до 3.30.2 или новее) https://itdef.net/ru/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDru2026-10-31Утечка данных Paradigm Healthcare Services: возможен доступ к номерам участников Medi-Cal и датам рождения, и что делать участникам https://itdef.net/ru/learn/photon-health-metabase-data-breach-2026ITDru2026-10-31Утечка данных Photon Health (уязвимость инструмента аналитики): имена, адреса, номера телефонов, даты рождения и сведения о рецептах — что делать пострадавшим пациентам https://itdef.net/ru/learn/plex-media-server-plex2shell-cve-2026-96652ITDru2026-10-31Plex2Shell: четыре CVE в Plex Media Server эксплуатируются на практике (обновитесь до 1.43.3.10861 или новее) https://itdef.net/ru/learn/polymarket-third-party-script-incident-2026ITDru2026-10-31Polymarket приостановила торги после компрометации стороннего скрипта: что делать пользователям и операторам сайтов https://itdef.net/ru/learn/ricardo-data-breach-2026ITDru2026-10-31Утечка данных Ricardo (швейцарский маркетплейс), около 890 000 аккаунтов: раскрыты имена, адреса и телефоны, и что делать пользователям https://itdef.net/ru/learn/sharepoint-server-cve-2026-65660ITDru2026-10-31SharePoint Server CVE-2026-65660: выполнение кода вошедшим пользователем, уязвимость эксплуатируется (установите обновления августа 2026 года) https://itdef.net/ru/learn/trezor-hardware-wallet-implant-report-2026ITDru2026-10-31Trezor сообщает о возможном аппаратном имплантате в Safe 5 от бывшего реселлера (не подтверждено): что делать владельцам https://itdef.net/ru/learn/yakult-website-data-breach-2026ITDru2026-10-31Взлом сайта Yakult Honsha (около 40 000 записей): имена, адреса, телефоны, адреса эл. почты и содержание обращений утекли — что делать пострадавшим https://itdef.net/ru/learn/zeabur-security-incident-2026ITDru2026-10-31Инцидент безопасности Zeabur (октябрь 2026, прочитано 3,22 млн переменных окружения): какие секреты заменить и что делать пользователям https://itdef.net/ko/learn/mybrands-data-breach-2026ITDko2026-11-02T11:00:00+09:00구인 사이트 MyBRANDS 부정 접근과 개인정보 유출 가능성(최대 약 13만 5천 계정): 이름, 연락처, 경력 정보가 걸린 구직자와 기업 담당자가 해야 할 일 https://itdef.net/ko/learn/saga-university-ransomware-2026ITDko2026-11-02T11:00:00+09:00사가 대학 랜섬웨어 공격(재학생, 교직원, 졸업생의 개인정보 약 8만 명분과 환자 정보 유출 가능성): 이름, 주소, 비밀번호가 포함된 사람이 해야 할 일 https://itdef.net/ko/learn/wordpress-7-1-4-security-release-rceITDko2026-11-02T11:00:00+09:00WordPress 7.1.4 취약점 CVE-2026-119977: 원격 코드 실행으로 이어질 수 있는 코어 업데이트 경쟁 상태 수정, 버전과 자동 업데이트 확인 https://itdef.net/ko/learn/binance-crypto-theft-2026ITDko2026-10-31바이낸스 암호화폐 탈취(약 63억 달러): 이용자 자금은 보전되나, 계정 보유자가 해야 할 일 https://itdef.net/ko/learn/chainalysis-security-incident-2026ITDko2026-11-01T10:40:00+09:00Chainalysis 보안 사고(2026년 10월): 이름, 이메일, 역할 라벨에 접근됨, 고객이 해야 할 일 https://itdef.net/ko/learn/club-tourism-data-breach-2026ITDko2026-11-01T10:40:00+09:00클럽투어리즘 무단 접근 및 개인정보 유출 가능성(약 432만 건): 이름, 주소, 전화번호, 긴급 연락처가 포함된 회원이 해야 할 일 https://itdef.net/ko/learn/linux-kernel-tcp-cve-2026-98432ITDko2026-11-01T10:40:00+09:00Linux 커널 CVE-2026-98432: 네트워크로 유발되는 TCP use-after-free(CVSS 9.8). 수정된 커널을 설치하고 재부팅하며 MPTCP도 확인하세요 https://itdef.net/ko/learn/northflank-security-incident-ai-api-keys-2026ITDko2026-11-01T10:40:00+09:00Northflank 보안 사고(2026년 10월): 저장된 환경 변수가 복호화된 것으로 간주, AI API 키 부정 사용 보고 https://itdef.net/ko/learn/ragtag-data-breach-2026ITDko2026-11-01T10:40:00+09:00월드 자회사 틴 팬 앨리(보도상 RAGTAG 운영사) 개인정보 유출 가능성(총 약 120만 건): 이름, 주소, 전화번호가 유출되었을 수 있음, 회원이 해야 할 일 https://itdef.net/ko/learn/revolve-payment-card-data-breach-2026ITDko2026-11-01T10:40:00+09:00Revolve 고객 계정 침해: 저장된 카드 번호와 유효기간에 접근됨(텍사스 주민 127,200명 게재) — 고객이 해야 할 일 https://itdef.net/ko/learn/aomei-backupper-update-server-tampering-2026ITDko2026-10-31AOMEI Backupper 업데이트 서버 변조(2026년 4월–7월): 영향받을 수 있는 사람, 날짜, PC 확인 방법 https://itdef.net/ko/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDko2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504: 로그인 없이 관리자 권한 접근, 악용됨(수정 릴리스로 업그레이드) https://itdef.net/ko/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDko2026-10-31Cloudflare Workers AI가 155건의 응답에서 다른 고객의 데이터를 반환(GLM 5.3): 호스팅 AI를 쓰는 팀이 점검할 것 https://itdef.net/ko/learn/cursor-fake-claude-code-extension-backdoor-2026ITDko2026-10-31Cursor 마켓플레이스의 변조된 'Claude Code' 확장(10월 29일, 약 11시간): SSH 백도어 확인 방법 https://itdef.net/ko/learn/dreamhost-password-reset-incident-2026ITDko2026-10-31DreamHost 보안 사고(2026년 10월): 일부 이메일·FTP·SFTP 사용자 비밀번호 재설정, 계정 소유자가 해야 할 일 https://itdef.net/ko/learn/drupal-commerce-core-cve-2026-118539ITDko2026-10-31Drupal Commerce Core CVE-2026-118539: 비인증 접근 우회, 악용 중(8.x-2.41 또는 3.3.13으로 업데이트) https://itdef.net/ko/learn/ets-california-student-data-breach-2026ITDko2026-10-31ETS 캘리포니아 학생 데이터 유출: 장애·504·시험 데이터 복사 — 가족이 해야 할 일 https://itdef.net/ko/learn/genesys-data-breach-2026ITDko2026-10-31Genesys 내부 시스템 침해(2026년 10월): 고객 연락처가 담긴 시스템에 무단 접근, 플랫폼은 영향 없음, 고객사가 해야 할 일 https://itdef.net/ko/learn/gettiis-ticket-data-breach-2026ITDko2026-10-31GETTIIS 회원 데이터 유출(회원 ID 317,971건): 유출된 항목과 회원이 해야 할 일 https://itdef.net/ko/learn/ivanti-connect-secure-cve-2026-111357ITDko2026-10-31Ivanti Connect Secure CVE-2026-111357 및 CVE-2026-118527: CISA KEV에 추가된 두 가지 추가 취약점(10월 공격에 대한 대처) https://itdef.net/ko/learn/matsuya-app-data-breach-2026ITDko2026-10-31마쓰야 앱 관리 시스템 유출(2,377,127건 및 앱 회원): 이름, 전화번호, 배달 주소 유출, 회원이 해야 할 일 https://itdef.net/ko/learn/muji-app-data-breach-2026ITDko2026-10-31료힌케이카쿠(MUJI) 앱 해킹(최대 약 2,726만 건): 이메일 주소, 생년월일, 성별 유출 가능성 — 이용자가 해야 할 일 https://itdef.net/ko/learn/opencode-console-api-key-breach-2026ITDko2026-10-31OpenCode Console 침해(2026년 10월, Console 이용자의 1.4%): AI 제공업체 API 키 노출 가능성과 해야 할 일 https://itdef.net/ko/learn/orkes-conductor-cve-2026-58138ITDko2026-10-31Orkes Conductor CVE-2026-58138: 인증 없이 OS 명령 실행, 공격 시도 관측(3.30.2 이상으로 업데이트) https://itdef.net/ko/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDko2026-10-31Paradigm Healthcare Services 데이터 유출: Medi-Cal 회원 번호와 생년월일 열람 가능성 — 회원이 해야 할 일 https://itdef.net/ko/learn/photon-health-metabase-data-breach-2026ITDko2026-10-31Photon Health 개인정보 유출(분석 도구 취약점): 이름, 주소, 전화번호, 생년월일, 처방 정보 — 영향을 받은 환자가 해야 할 일 https://itdef.net/ko/learn/plex-media-server-plex2shell-cve-2026-96652ITDko2026-10-31Plex2Shell: Plex Media Server CVE 4건이 실제로 악용됨(1.43.3.10861 이상으로 업데이트) https://itdef.net/ko/learn/polymarket-third-party-script-incident-2026ITDko2026-10-31폴리마켓, 제3자 스크립트 침해로 거래 중단: 이용자와 사이트 운영자가 해야 할 일 https://itdef.net/ko/learn/ricardo-data-breach-2026ITDko2026-10-31Ricardo(스위스 마켓플레이스) 정보 유출, 약 89만 계정: 이름·주소·전화번호 노출, 이용자가 해야 할 일 https://itdef.net/ko/learn/sharepoint-server-cve-2026-65660ITDko2026-10-31SharePoint Server CVE-2026-65660: 로그인한 사용자가 코드 실행 가능, 악용됨(2026년 8월 업데이트 설치) https://itdef.net/ko/learn/trezor-hardware-wallet-implant-report-2026ITDko2026-10-31Trezor, 전 판매업체에서 구입한 Safe 5에서 하드웨어 임플란트 가능성 보고(미확인): 소유자가 해야 할 일 https://itdef.net/ko/learn/yakult-website-data-breach-2026ITDko2026-10-31야쿠르트 본사 웹사이트 해킹(약 4만 건): 이름, 주소, 전화번호, 이메일, 문의 내용 유출 — 영향을 받은 사람이 해야 할 일 https://itdef.net/ko/learn/zeabur-security-incident-2026ITDko2026-10-31Zeabur 보안 사고(2026년 10월, 환경 변수 322만 건 열람): 교체할 시크릿과 이용자가 해야 할 일 https://itdef.net/es/learn/mybrands-data-breach-2026ITDes2026-11-02T11:00:00+09:00Acceso no autorizado a la bolsa de empleo MyBRANDS y posible filtración de datos personales (hasta unas 135.000 cuentas): qué deben hacer quienes buscan empleo y los contactos de empresas con nombre, datos de contacto e historial laboral https://itdef.net/es/learn/saga-university-ransomware-2026ITDes2026-11-02T11:00:00+09:00Ataque de ransomware a la Universidad de Saga (los datos personales de estudiantes, personal y exalumnos pueden haberse filtrado, unas 80.000 personas, más datos de pacientes): qué deben hacer quienes tienen registrados su nombre, dirección y contraseña https://itdef.net/es/learn/wordpress-7-1-4-security-release-rceITDes2026-11-02T11:00:00+09:00Fallo de WordPress 7.1.4 CVE-2026-119977: se corrige una condición de carrera en la actualización del núcleo que puede llevar a la ejecución remota de código; compruebe su versión y las actualizaciones automáticas https://itdef.net/es/learn/binance-crypto-theft-2026ITDes2026-10-31Robo de criptoactivos en Binance (unos US$6.300 millones): ¿están cubiertos los fondos de los usuarios y qué deben hacer los titulares de cuentas? https://itdef.net/es/learn/chainalysis-security-incident-2026ITDes2026-11-01T10:40:00+09:00Incidente de seguridad de Chainalysis (octubre de 2026): se accedió a nombres, correos y etiquetas de rol, y qué deben hacer los clientes https://itdef.net/es/learn/club-tourism-data-breach-2026ITDes2026-11-01T10:40:00+09:00Acceso no autorizado a Club Tourism y posible filtración de datos personales (unos 4,32 millones de registros): qué deben hacer los socios con nombre, dirección, teléfono y contacto de emergencia https://itdef.net/es/learn/linux-kernel-tcp-cve-2026-98432ITDes2026-11-01T10:40:00+09:00CVE-2026-98432 del kernel de Linux: un use-after-free de TCP activable por red (CVSS 9.8); instale el kernel corregido, reinicie y revise MPTCP https://itdef.net/es/learn/northflank-security-incident-ai-api-keys-2026ITDes2026-11-01T10:40:00+09:00Incidente de seguridad de Northflank (octubre de 2026): variables de entorno almacenadas que se deben dar por descifradas y uso indebido de claves de API de IA https://itdef.net/es/learn/ragtag-data-breach-2026ITDes2026-11-01T10:40:00+09:00Filtración en Tin Pan Alley, filial de World (operador de RAGTAG, según la prensa), con unos 1,2 millones de registros en total: nombres, direcciones y teléfonos pueden haberse filtrado y qué deben hacer los socios https://itdef.net/es/learn/revolve-payment-card-data-breach-2026ITDes2026-11-01T10:40:00+09:00Filtración de cuentas de clientes de Revolve: números de tarjeta guardados y fechas de caducidad a los que se accedió (127.200 residentes de Texas registrados) y qué deben hacer los clientes https://itdef.net/es/learn/aomei-backupper-update-server-tampering-2026ITDes2026-10-31Servidor de actualizaciones de AOMEI Backupper manipulado (de abril a julio de 2026): quién puede estar afectado, las fechas y cómo revisar su PC https://itdef.net/es/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDes2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504: acceso de administrador sin iniciar sesión, explotada (actualice a una versión corregida) https://itdef.net/es/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDes2026-10-31Cloudflare Workers AI devolvió datos de otros clientes en 155 respuestas (GLM 5.3): qué deben comprobar los equipos que usan IA alojada https://itdef.net/es/learn/cursor-fake-claude-code-extension-backdoor-2026ITDes2026-10-31Extensión «Claude Code» manipulada en el mercado de Cursor (29 de oct., unas 11 horas): cómo comprobar si hay una puerta trasera SSH https://itdef.net/es/learn/dreamhost-password-reset-incident-2026ITDes2026-10-31Incidente de DreamHost (octubre de 2026): restablecidas las contraseñas de algunos usuarios de correo, FTP y SFTP, y qué deben hacer los titulares de cuenta https://itdef.net/es/learn/drupal-commerce-core-cve-2026-118539ITDes2026-10-31Drupal Commerce Core CVE-2026-118539: omisión de acceso sin autenticación, explotada activamente (actualice a 8.x-2.41 o 3.3.13) https://itdef.net/es/learn/ets-california-student-data-breach-2026ITDes2026-10-31Filtración de datos de estudiantes de ETS en California: se copiaron datos de discapacidad, 504 y pruebas, y qué deben hacer las familias https://itdef.net/es/learn/genesys-data-breach-2026ITDes2026-10-31Brecha en sistemas internos de Genesys (octubre de 2026): accedieron a sistemas con datos de contacto de clientes, las plataformas no se vieron afectadas, y qué deben hacer los clientes https://itdef.net/es/learn/gettiis-ticket-data-breach-2026ITDes2026-10-31Filtración de datos de miembros de GETTIIS (317.971 ID de miembro): qué se filtró y qué deben hacer los miembros https://itdef.net/es/learn/ivanti-connect-secure-cve-2026-111357ITDes2026-10-31Ivanti Connect Secure CVE-2026-111357 y CVE-2026-118527: dos fallos más añadidos al KEV de CISA (qué hacer ante los ataques de octubre) https://itdef.net/es/learn/matsuya-app-data-breach-2026ITDes2026-10-31Filtración en el sistema de gestión de la app de Matsuya (2.377.127 registros más miembros de la app): nombres, teléfonos y direcciones de entrega expuestos: qué deben hacer los miembros https://itdef.net/es/learn/muji-app-data-breach-2026ITDes2026-10-31Filtración de la app de Ryohin Keikaku (MUJI) (hasta unos 27,26 millones de registros): pueden haberse filtrado correos, fechas de nacimiento y género — qué deben hacer los usuarios https://itdef.net/es/learn/opencode-console-api-key-breach-2026ITDes2026-10-31Brecha de OpenCode Console (octubre de 2026, 1,4 % de los usuarios de Console): claves de API de proveedores de IA posiblemente expuestas, y qué hacer https://itdef.net/es/learn/orkes-conductor-cve-2026-58138ITDes2026-10-31Orkes Conductor CVE-2026-58138: ejecución de comandos del sistema sin autenticación, con intentos de ataque observados (actualice a 3.30.2 o posterior) https://itdef.net/es/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDes2026-10-31Filtración de datos de Paradigm Healthcare Services: pudo haberse accedido a números de afiliado de Medi-Cal y fechas de nacimiento, y qué deben hacer los afiliados https://itdef.net/es/learn/photon-health-metabase-data-breach-2026ITDes2026-10-31Filtración de datos de Photon Health (fallo en una herramienta de análisis): nombres, direcciones, teléfonos, fechas de nacimiento e información de recetas — qué deben hacer los pacientes afectados https://itdef.net/es/learn/plex-media-server-plex2shell-cve-2026-96652ITDes2026-10-31Plex2Shell: cuatro CVE de Plex Media Server explotadas activamente (actualice a 1.43.3.10861 o posterior) https://itdef.net/es/learn/polymarket-third-party-script-incident-2026ITDes2026-10-31Polymarket detiene las operaciones tras comprometerse un script de terceros: qué deben hacer los usuarios y los operadores de sitios https://itdef.net/es/learn/ricardo-data-breach-2026ITDes2026-10-31Filtración de datos de Ricardo (marketplace suizo), unas 890.000 cuentas: nombres, direcciones y teléfonos expuestos, y qué deben hacer los usuarios https://itdef.net/es/learn/sharepoint-server-cve-2026-65660ITDes2026-10-31SharePoint Server CVE-2026-65660: ejecución de código por un usuario con sesión iniciada, explotada (instale las actualizaciones de agosto de 2026) https://itdef.net/es/learn/trezor-hardware-wallet-implant-report-2026ITDes2026-10-31Trezor informa de un posible implante de hardware en un Safe 5 de un antiguo revendedor (sin confirmar): qué deben hacer los propietarios https://itdef.net/es/learn/yakult-website-data-breach-2026ITDes2026-10-31Filtración del sitio web de Yakult Honsha (unos 40.000 registros): se filtraron nombres, direcciones, teléfonos, correos y contenido de consultas — qué deben hacer los afectados https://itdef.net/es/learn/zeabur-security-incident-2026ITDes2026-10-31Incidente de seguridad de Zeabur (octubre de 2026, 3,22 millones de variables de entorno leídas): qué secretos rotar y qué deben hacer los usuarios https://itdef.net/pt-BR/learn/mybrands-data-breach-2026ITDpt2026-11-02T11:00:00+09:00Acesso não autorizado ao site de empregos MyBRANDS e possível vazamento de dados pessoais (até cerca de 135 mil contas): o que devem fazer candidatos e contatos de empresas com nome, dados de contato e histórico profissional https://itdef.net/pt-BR/learn/saga-university-ransomware-2026ITDpt2026-11-02T11:00:00+09:00Ataque de ransomware à Universidade de Saga (dados pessoais de estudantes, funcionários e ex-alunos podem ter vazado, cerca de 80 mil pessoas, além de dados de pacientes): o que devem fazer as pessoas com nome, endereço e senha registrados https://itdef.net/pt-BR/learn/wordpress-7-1-4-security-release-rceITDpt2026-11-02T11:00:00+09:00Falha do WordPress 7.1.4 CVE-2026-119977: corrigida uma condição de corrida na atualização do núcleo que pode levar à execução remota de código; verifique sua versão e as atualizações automáticas https://itdef.net/pt-BR/learn/binance-crypto-theft-2026ITDpt2026-10-31Roubo de criptoativos na Binance (cerca de US$ 6,3 bilhões): os fundos dos usuários estão cobertos e o que os titulares de contas devem fazer https://itdef.net/pt-BR/learn/chainalysis-security-incident-2026ITDpt2026-11-01T10:40:00+09:00Incidente de segurança da Chainalysis (outubro de 2026): nomes, e-mails e rótulos de função acessados, e o que os clientes devem fazer https://itdef.net/pt-BR/learn/club-tourism-data-breach-2026ITDpt2026-11-01T10:40:00+09:00Acesso não autorizado à Club Tourism e possível vazamento de dados pessoais (cerca de 4,32 milhões de registros): o que devem fazer os membros com nome, endereço, telefone e contato de emergência https://itdef.net/pt-BR/learn/linux-kernel-tcp-cve-2026-98432ITDpt2026-11-01T10:40:00+09:00CVE-2026-98432 do kernel do Linux: um use-after-free de TCP acionável pela rede (CVSS 9.8); instale o kernel corrigido, reinicie e verifique o MPTCP https://itdef.net/pt-BR/learn/northflank-security-incident-ai-api-keys-2026ITDpt2026-11-01T10:40:00+09:00Incidente de segurança da Northflank (outubro de 2026): variáveis de ambiente armazenadas que devem ser tratadas como descriptografadas e uso indevido de chaves de API de IA https://itdef.net/pt-BR/learn/ragtag-data-breach-2026ITDpt2026-11-01T10:40:00+09:00Vazamento na Tin Pan Alley, subsidiária da World (operadora da RAGTAG, segundo a imprensa), com cerca de 1,2 milhão de registros no total: nomes, endereços e telefones podem ter vazado e o que os membros devem fazer https://itdef.net/pt-BR/learn/revolve-payment-card-data-breach-2026ITDpt2026-11-01T10:40:00+09:00Vazamento de contas de clientes da Revolve: números de cartão salvos e datas de validade acessados (127.200 texanos listados) e o que os clientes devem fazer https://itdef.net/pt-BR/learn/aomei-backupper-update-server-tampering-2026ITDpt2026-10-31Servidor de atualizações do AOMEI Backupper adulterado (de abril a julho de 2026): quem pode ter sido afetado, as datas e como verificar seu PC https://itdef.net/pt-BR/learn/cisco-catalyst-sd-wan-manager-cve-2026-76504ITDpt2026-10-31Cisco Catalyst SD-WAN Manager CVE-2026-76504: acesso de administrador sem login, explorada (atualize para uma versão corrigida) https://itdef.net/pt-BR/learn/cloudflare-workers-ai-cache-data-exposure-2026ITDpt2026-10-31Cloudflare Workers AI devolveu dados de outros clientes em 155 respostas (GLM 5.3): o que as equipes que usam IA hospedada devem verificar https://itdef.net/pt-BR/learn/cursor-fake-claude-code-extension-backdoor-2026ITDpt2026-10-31Extensão “Claude Code” adulterada no marketplace do Cursor (29 de out., cerca de 11 horas): como verificar se há um backdoor SSH https://itdef.net/pt-BR/learn/dreamhost-password-reset-incident-2026ITDpt2026-10-31Incidente da DreamHost (outubro de 2026): senhas de alguns usuários de e-mail, FTP e SFTP redefinidas, e o que os titulares de conta devem fazer https://itdef.net/pt-BR/learn/drupal-commerce-core-cve-2026-118539ITDpt2026-10-31Drupal Commerce Core CVE-2026-118539: desvio de acesso sem autenticação, explorado ativamente (atualize para 8.x-2.41 ou 3.3.13) https://itdef.net/pt-BR/learn/ets-california-student-data-breach-2026ITDpt2026-10-31Vazamento de dados de estudantes da ETS na Califórnia: dados de deficiência, 504 e provas copiados, e o que as famílias devem fazer https://itdef.net/pt-BR/learn/genesys-data-breach-2026ITDpt2026-10-31Invasão de sistemas internos da Genesys (outubro de 2026): sistemas com dados de contato de clientes foram acessados, plataformas não afetadas, e o que os clientes devem fazer https://itdef.net/pt-BR/learn/gettiis-ticket-data-breach-2026ITDpt2026-10-31Vazamento de dados de membros do GETTIIS (317.971 IDs de membro): o que vazou e o que os membros devem fazer https://itdef.net/pt-BR/learn/ivanti-connect-secure-cve-2026-111357ITDpt2026-10-31Ivanti Connect Secure CVE-2026-111357 e CVE-2026-118527: mais duas falhas adicionadas ao KEV da CISA (o que fazer diante dos ataques de outubro) https://itdef.net/pt-BR/learn/matsuya-app-data-breach-2026ITDpt2026-10-31Vazamento no sistema de gestão do app da Matsuya (2.377.127 registros mais membros do app): nomes, telefones e endereços de entrega expostos: o que os membros devem fazer https://itdef.net/pt-BR/learn/muji-app-data-breach-2026ITDpt2026-10-31Vazamento no app da Ryohin Keikaku (MUJI) (até cerca de 27,26 milhões de registros): e-mails, datas de nascimento e gênero podem ter vazado — o que os usuários devem fazer https://itdef.net/pt-BR/learn/opencode-console-api-key-breach-2026ITDpt2026-10-31Violação no OpenCode Console (outubro de 2026, 1,4% dos usuários do Console): chaves de API de provedores de IA possivelmente expostas, e o que fazer https://itdef.net/pt-BR/learn/orkes-conductor-cve-2026-58138ITDpt2026-10-31Orkes Conductor CVE-2026-58138: execução de comandos do sistema sem autenticação, com tentativas de ataque observadas (atualize para 3.30.2 ou posterior) https://itdef.net/pt-BR/learn/paradigm-healthcare-medi-cal-data-breach-2026ITDpt2026-10-31Vazamento de dados da Paradigm Healthcare Services: números de afiliado do Medi-Cal e datas de nascimento podem ter sido acessados, e o que os afiliados devem fazer https://itdef.net/pt-BR/learn/photon-health-metabase-data-breach-2026ITDpt2026-10-31Vazamento de dados da Photon Health (falha em uma ferramenta de análise): nomes, endereços, telefones, datas de nascimento e informações de receitas — o que os pacientes afetados devem fazer https://itdef.net/pt-BR/learn/plex-media-server-plex2shell-cve-2026-96652ITDpt2026-10-31Plex2Shell: quatro CVEs do Plex Media Server exploradas ativamente (atualize para 1.43.3.10861 ou posterior) https://itdef.net/pt-BR/learn/polymarket-third-party-script-incident-2026ITDpt2026-10-31Polymarket suspende as negociações após o comprometimento de um script de terceiros: o que usuários e operadores de sites devem fazer https://itdef.net/pt-BR/learn/ricardo-data-breach-2026ITDpt2026-10-31Vazamento de dados da Ricardo (marketplace suíço), cerca de 890 mil contas: nomes, endereços e telefones expostos, e o que os usuários devem fazer https://itdef.net/pt-BR/learn/sharepoint-server-cve-2026-65660ITDpt2026-10-31SharePoint Server CVE-2026-65660: execução de código por um usuário logado, explorada (instale as atualizações de agosto de 2026) https://itdef.net/pt-BR/learn/trezor-hardware-wallet-implant-report-2026ITDpt2026-10-31Trezor relata possível implante de hardware em um Safe 5 de um ex-revendedor (não confirmado): o que os proprietários devem fazer https://itdef.net/pt-BR/learn/yakult-website-data-breach-2026ITDpt2026-10-31Vazamento no site da Yakult Honsha (cerca de 40.000 registros): nomes, endereços, telefones, e-mails e conteúdo de consultas vazaram — o que os afetados devem fazer https://itdef.net/pt-BR/learn/zeabur-security-incident-2026ITDpt2026-10-31Incidente de segurança da Zeabur (outubro de 2026, 3,22 milhões de variáveis de ambiente lidas): quais segredos trocar e o que os usuários devem fazer