https://itdef.net/ja/learn/hottomotto-newsletter-data-breach-2026ITDja2026-11-07T16:00:00+09:00ほっともっとのメールマガジン配信サービスに不正アクセス（最大約700万件）：氏名・生年月日・電話番号などが流出、会員がやること https://itdef.net/ja/learn/irisplaza-data-breach-2026ITDja2026-11-07T16:00:00+09:00アイリスプラザへの不正アクセス（約770万人分）：氏名・住所・パスワード（暗号化）などが漏えいした可能性、会員・購入者がやること https://itdef.net/ja/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDja2026-11-07T16:00:00+09:00SonicWall SonicOSのSSL-VPNの脆弱性 CVE-2026-19868：SAMLと多要素認証を回避される、KEVに追加（Gen7・Gen8を更新） https://itdef.net/ja/learn/suntory-group-data-breach-2026ITDja2026-11-07T14:30:00+09:00サントリーグループの個人情報漏えい（従業員等 約9万名ほか）：外部クラウドサービスへの不正アクセスで氏名・メールアドレス等が流出。応募者・顧客がやること https://itdef.net/ja/learn/credit-mutuel-arkea-cyberattack-2026ITDja2026-11-07T12:00:00+09:00仏Crédit Mutuel Arkéaへのサイバー攻撃：外部事業者のプラットフォーム経由で自社口座から不正送金、顧客の資産に影響なしと発表 https://itdef.net/ja/learn/digicert-validation-archive-breach-2026ITDja2026-11-07T12:00:00+09:00DigiCert（認証局）の社内業務システムへの不正アクセス：顧客担当者の連絡先と一部の本人確認書類が対象になり、顧客がやること https://itdef.net/ja/learn/docomo-online-shop-my-docomo-data-breach-2026ITDja2026-11-07T12:00:00+09:00NTTドコモ「ドコモオンラインショップ」「My docomo」への不正アクセス（最大約30万件）：本人確認書類の番号などが流出、契約者がやること https://itdef.net/ja/learn/nikke-pc-launcher-malware-2026ITDja2026-11-07T12:00:00+09:00『勝利の女神：NIKKE』PCランチャーの読み込みファイルが改ざんされ、不正プログラムが配布された：9月27日15:41以降にWindows版を起動した人がやること https://itdef.net/ja/learn/openssh-10-6p2-password-auth-bypass-2026ITDja2026-11-07T12:00:00+09:00OpenSSH 10.6p2 の緊急修正（CVE-2026-123158）｜AlpineなどmuslのsshdにPAMなしでパスワード認証バイパス https://itdef.net/en/learn/hottomotto-newsletter-data-breach-2026ITDen2026-11-07T16:00:00+09:00Unauthorized access to Hotto Motto's newsletter delivery service (up to about 7 million records): names, dates of birth and phone numbers leaked — what members should do https://itdef.net/en/learn/irisplaza-data-breach-2026ITDen2026-11-07T16:00:00+09:00Unauthorized access at Iris Plaza (data on about 7.7 million people): names, addresses and encrypted passwords may have leaked — what members and shoppers should do https://itdef.net/en/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDen2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868: SAML and its MFA can be bypassed, in CISA KEV (upgrade Gen7 and Gen8) https://itdef.net/en/learn/suntory-group-data-breach-2026ITDen2026-11-07T14:30:00+09:00Suntory Group Personal Data Leak (About 90,000 Employees and Partner Staff, and Other Groups): Names and Email Addresses Leaked After Unauthorized Access to an External Cloud Service, and What Applicants and Customers Should Do https://itdef.net/en/learn/credit-mutuel-arkea-cyberattack-2026ITDen2026-11-07T12:00:00+09:00Crédit Mutuel Arkéa Cyberattack (France): Fraudulent Transfers From Its Own Account via a Service Provider's Platform, Customer Assets Unaffected https://itdef.net/en/learn/digicert-validation-archive-breach-2026ITDen2026-11-07T12:00:00+09:00DigiCert (Certificate Authority) Internal Business System Breach: Customer Representatives' Contact Details and Some ID Documents, and What Customers Should Do https://itdef.net/en/learn/docomo-online-shop-my-docomo-data-breach-2026ITDen2026-11-07T12:00:00+09:00NTT Docomo online shop and My docomo breach (up to about 300,000 records): ID document numbers leaked — what customers should do https://itdef.net/en/learn/nikke-pc-launcher-malware-2026ITDen2026-11-07T12:00:00+09:00NIKKE (Goddess of Victory) PC Launcher Files Were Tampered With and a Malicious Program Was Distributed: What Windows Users Since September 27, 15:41 JST Should Do https://itdef.net/en/learn/openssh-10-6p2-password-auth-bypass-2026ITDen2026-11-07T12:00:00+09:00OpenSSH 10.6p2 emergency fix (CVE-2026-123158): password-authentication bypass in sshd on musl systems without PAM, such as Alpine https://itdef.net/zh-CN/learn/hottomotto-newsletter-data-breach-2026ITDzh-cn2026-11-07T16:00:00+09:00Hotto Motto电子报发送服务遭未经授权访问（最多约700万条记录）：姓名、出生日期和电话号码外泄，会员该怎么做 https://itdef.net/zh-CN/learn/irisplaza-data-breach-2026ITDzh-cn2026-11-07T16:00:00+09:00Iris Plaza遭未经授权访问（约770万人的数据）：姓名、住址和加密密码可能外泄，会员和购物者该怎么做 https://itdef.net/zh-CN/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDzh-cn2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868：SAML 及其 MFA 可被绕过，已列入 CISA KEV（请升级 Gen7 和 Gen8） https://itdef.net/zh-CN/learn/suntory-group-data-breach-2026ITDzh-cn2026-11-07T14:30:00+09:00三得利集团个人信息泄露（员工及合作企业员工约90,000人及其他类别）：外部云服务遭未经授权访问，姓名、电子邮件地址等外泄，应聘者和顾客应如何应对 https://itdef.net/zh-CN/learn/credit-mutuel-arkea-cyberattack-2026ITDzh-cn2026-11-07T12:00:00+09:00Crédit Mutuel Arkéa网络攻击（法国）：经由服务提供商的平台，从其自有账户发生欺诈性转账，客户资产未受影响 https://itdef.net/zh-CN/learn/digicert-validation-archive-breach-2026ITDzh-cn2026-11-07T12:00:00+09:00DigiCert（证书颁发机构）内部业务系统遭入侵：客户代表的联系方式及部分身份证明文件，客户应如何应对 https://itdef.net/zh-CN/learn/docomo-online-shop-my-docomo-data-breach-2026ITDzh-cn2026-11-07T12:00:00+09:00NTT DOCOMO「docomo Online Shop」与「My docomo」数据泄露（最多约30万条记录）：身份证件号码外泄，用户该怎么做 https://itdef.net/zh-CN/learn/nikke-pc-launcher-malware-2026ITDzh-cn2026-11-07T12:00:00+09:00「胜利女神：妮姬」PC 启动器文件遭篡改并分发恶意程序：9 月 27 日 15:41（日本时间）之后启动过 Windows 版的用户该怎么做 https://itdef.net/zh-CN/learn/openssh-10-6p2-password-auth-bypass-2026ITDzh-cn2026-11-07T12:00:00+09:00OpenSSH 10.6p2 紧急修复（CVE-2026-123158）：Alpine 等未启用 PAM 的 musl 系统上，sshd 的密码认证可被绕过 https://itdef.net/zh-TW/learn/hottomotto-newsletter-data-breach-2026ITDzh-tw2026-11-07T16:00:00+09:00Hotto Motto 電子報發送服務遭未經授權存取（最多約700萬筆紀錄）：姓名、出生日期與電話號碼外洩，會員該怎麼做 https://itdef.net/zh-TW/learn/irisplaza-data-breach-2026ITDzh-tw2026-11-07T16:00:00+09:00Iris Plaza 遭未經授權存取（約770萬人的資料）：姓名、地址與加密密碼可能外洩，會員與購物者該怎麼做 https://itdef.net/zh-TW/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDzh-tw2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868：SAML 及其 MFA 可遭繞過，已列入 CISA KEV（請升級 Gen7 與 Gen8） https://itdef.net/zh-TW/learn/suntory-group-data-breach-2026ITDzh-tw2026-11-07T14:30:00+09:00三得利集團個人資料外洩（員工及合作企業員工約 90,000 人及其他類別）：外部雲端服務遭未經授權存取，姓名、電子郵件地址等外洩，應徵者與顧客該怎麼做 https://itdef.net/zh-TW/learn/credit-mutuel-arkea-cyberattack-2026ITDzh-tw2026-11-07T12:00:00+09:00Crédit Mutuel Arkéa 網路攻擊（法國）：經由服務供應商的平台，從其自有帳戶發生詐欺轉帳，客戶資產未受影響 https://itdef.net/zh-TW/learn/digicert-validation-archive-breach-2026ITDzh-tw2026-11-07T12:00:00+09:00DigiCert（憑證機構）內部業務系統遭入侵：客戶代表的聯絡資料及部分身分證明文件，客戶應如何因應 https://itdef.net/zh-TW/learn/docomo-online-shop-my-docomo-data-breach-2026ITDzh-tw2026-11-07T12:00:00+09:00NTT DOCOMO「docomo Online Shop」與「My docomo」資料外洩（最多約30萬筆紀錄）：身分證件號碼外洩，用戶該怎麼做 https://itdef.net/zh-TW/learn/nikke-pc-launcher-malware-2026ITDzh-tw2026-11-07T12:00:00+09:00「勝利女神：妮姬」PC 啟動器檔案遭竄改並散布惡意程式：9 月 27 日 15:41（日本時間）之後啟動過 Windows 版的使用者該怎麼做 https://itdef.net/zh-TW/learn/openssh-10-6p2-password-auth-bypass-2026ITDzh-tw2026-11-07T12:00:00+09:00OpenSSH 10.6p2 緊急修補（CVE-2026-123158）：Alpine 等未啟用 PAM 的 musl 系統上，sshd 的密碼驗證可被繞過 https://itdef.net/ru/learn/hottomotto-newsletter-data-breach-2026ITDru2026-11-07T16:00:00+09:00Несанкционированный доступ к сервису рассылки новостей Hotto Motto (до примерно 7 млн записей): утекли имена, даты рождения и номера телефонов — что делать участникам https://itdef.net/ru/learn/irisplaza-data-breach-2026ITDru2026-11-07T16:00:00+09:00Несанкционированный доступ к Iris Plaza (данные примерно 7,7 млн человек): могли утечь имена, адреса и зашифрованные пароли — что делать участникам и покупателям https://itdef.net/ru/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDru2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868: обход SAML и MFA, уязвимость в KEV CISA (обновите Gen7 и Gen8) https://itdef.net/ru/learn/suntory-group-data-breach-2026ITDru2026-11-07T14:30:00+09:00Утечка персональных данных Suntory Group (около 90 000 сотрудников и сотрудников партнеров, а также другие группы): имена и адреса электронной почты утекли после несанкционированного доступа к внешнему облачному сервису, и что делать соискателям и клиентам https://itdef.net/ru/learn/credit-mutuel-arkea-cyberattack-2026ITDru2026-11-07T12:00:00+09:00Кибератака на Crédit Mutuel Arkéa (Франция): мошеннические переводы со своего счета через платформу поставщика услуг, активы клиентов не затронуты https://itdef.net/ru/learn/digicert-validation-archive-breach-2026ITDru2026-11-07T12:00:00+09:00Взлом внутренней бизнес-системы DigiCert (удостоверяющий центр): контакты представителей клиентов и часть документов, удостоверяющих личность, и что делать клиентам https://itdef.net/ru/learn/docomo-online-shop-my-docomo-data-breach-2026ITDru2026-11-07T12:00:00+09:00Утечка из docomo Online Shop и My docomo (NTT DOCOMO), до примерно 300 000 записей: номера документов, удостоверяющих личность, — что делать клиентам https://itdef.net/ru/learn/nikke-pc-launcher-malware-2026ITDru2026-11-07T12:00:00+09:00Файлы PC-лаунчера GODDESS OF VICTORY: NIKKE изменены, распространялась вредоносная программа: что делать пользователям Windows, запускавшим лаунчер после 15:41 (JST) 27 сентября https://itdef.net/ru/learn/openssh-10-6p2-password-auth-bypass-2026ITDru2026-11-07T12:00:00+09:00Срочное исправление OpenSSH 10.6p2 (CVE-2026-123158): обход парольной аутентификации в sshd на системах с musl без PAM, например Alpine https://itdef.net/ko/learn/hottomotto-newsletter-data-breach-2026ITDko2026-11-07T16:00:00+09:00Hotto Motto 뉴스레터 발송 서비스 무단 접근(최대 약 700만 건): 이름, 생년월일, 전화번호 유출, 회원이 해야 할 일 https://itdef.net/ko/learn/irisplaza-data-breach-2026ITDko2026-11-07T16:00:00+09:00Iris Plaza 무단 접근(약 770만 명분 정보): 이름, 주소, 암호화된 비밀번호 유출 가능성, 회원과 구매자가 해야 할 일 https://itdef.net/ko/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDko2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868: SAML과 MFA 우회 가능, CISA KEV 등재(Gen7·Gen8 업그레이드) https://itdef.net/ko/learn/suntory-group-data-breach-2026ITDko2026-11-07T14:30:00+09:00산토리 그룹 개인정보 유출(직원 및 파트너사 직원 약 90,000명, 그 밖의 그룹): 외부 클라우드 서비스 무단 접근으로 이름·이메일 주소 등 유출, 지원자와 고객이 할 일 https://itdef.net/ko/learn/credit-mutuel-arkea-cyberattack-2026ITDko2026-11-07T12:00:00+09:00크레디 뮈튀엘 아르케아(프랑스) 사이버 공격: 서비스 제공업체 플랫폼을 통한 자사 계좌의 부정 이체, 고객 자산은 영향 없음 https://itdef.net/ko/learn/digicert-validation-archive-breach-2026ITDko2026-11-07T12:00:00+09:00DigiCert(인증 기관) 내부 업무 시스템 침해: 고객 담당자의 연락처와 일부 신분 증명 문서, 고객이 할 일 https://itdef.net/ko/learn/docomo-online-shop-my-docomo-data-breach-2026ITDko2026-11-07T12:00:00+09:00NTT DOCOMO 'docomo Online Shop'·'My docomo' 정보 유출(최대 약 30만 건): 본인확인서류 번호 유출, 이용자가 해야 할 일 https://itdef.net/ko/learn/nikke-pc-launcher-malware-2026ITDko2026-11-07T12:00:00+09:00「승리의 여신: 니케」PC 런처 파일이 변조되어 악성 프로그램이 배포됨: 9월 27일 15:41(일본 시간) 이후 Windows 버전을 실행한 사람이 할 일 https://itdef.net/ko/learn/openssh-10-6p2-password-auth-bypass-2026ITDko2026-11-07T12:00:00+09:00OpenSSH 10.6p2 긴급 수정(CVE-2026-123158): Alpine 등 PAM이 없는 musl 시스템에서 sshd 비밀번호 인증이 우회될 수 있음 https://itdef.net/es/learn/hottomotto-newsletter-data-breach-2026ITDes2026-11-07T16:00:00+09:00Acceso no autorizado al servicio de envío del boletín de Hotto Motto (hasta unos 7 millones de registros): nombres, fechas de nacimiento y teléfonos filtrados, y qué deben hacer los miembros https://itdef.net/es/learn/irisplaza-data-breach-2026ITDes2026-11-07T16:00:00+09:00Acceso no autorizado en Iris Plaza (datos de unos 7,7 millones de personas): nombres, direcciones y contraseñas cifradas pueden haberse filtrado, y qué deben hacer los miembros y compradores https://itdef.net/es/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDes2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868: se pueden eludir SAML y su MFA, en el KEV de CISA (actualice Gen7 y Gen8) https://itdef.net/es/learn/suntory-group-data-breach-2026ITDes2026-11-07T14:30:00+09:00Filtración de datos personales de Suntory Group (unos 90.000 empleados y personal de socios, y otros grupos): nombres y correos filtrados tras un acceso no autorizado a un servicio en la nube externo, y qué deben hacer candidatos y clientes https://itdef.net/es/learn/credit-mutuel-arkea-cyberattack-2026ITDes2026-11-07T12:00:00+09:00Ciberataque a Crédit Mutuel Arkéa (Francia): transferencias fraudulentas desde su propia cuenta a través de la plataforma de un proveedor, activos de los clientes sin afectar https://itdef.net/es/learn/digicert-validation-archive-breach-2026ITDes2026-11-07T12:00:00+09:00Intrusión en un sistema interno de DigiCert (autoridad de certificación): datos de contacto de representantes de clientes y algunos documentos de identidad, y qué deben hacer los clientes https://itdef.net/es/learn/docomo-online-shop-my-docomo-data-breach-2026ITDes2026-11-07T12:00:00+09:00Brecha en docomo Online Shop y My docomo de NTT DOCOMO (hasta unos 300.000 registros): números de documento de identidad filtrados y qué deben hacer los clientes https://itdef.net/es/learn/nikke-pc-launcher-malware-2026ITDes2026-11-07T12:00:00+09:00Manipulan los archivos del lanzador de PC de GODDESS OF VICTORY: NIKKE y se distribuye un programa malicioso: qué hacer si usó la versión de Windows desde las 15:41 (JST) del 27 de septiembre https://itdef.net/es/learn/openssh-10-6p2-password-auth-bypass-2026ITDes2026-11-07T12:00:00+09:00Corrección urgente de OpenSSH 10.6p2 (CVE-2026-123158): elusión de la autenticación por contraseña en sshd en sistemas con musl sin PAM, como Alpine https://itdef.net/pt-BR/learn/hottomotto-newsletter-data-breach-2026ITDpt2026-11-07T16:00:00+09:00Acesso não autorizado ao serviço de envio da newsletter da Hotto Motto (até cerca de 7 milhões de registros): nomes, datas de nascimento e telefones vazaram — o que os membros devem fazer https://itdef.net/pt-BR/learn/irisplaza-data-breach-2026ITDpt2026-11-07T16:00:00+09:00Acesso não autorizado na Iris Plaza (dados de cerca de 7,7 milhões de pessoas): nomes, endereços e senhas criptografadas podem ter vazado — o que membros e compradores devem fazer https://itdef.net/pt-BR/learn/sonicwall-sonicos-ssl-vpn-cve-2026-19868ITDpt2026-11-07T16:00:00+09:00SonicWall SonicOS SSL-VPN CVE-2026-19868: SAML e sua MFA podem ser contornados, no KEV da CISA (atualize Gen7 e Gen8) https://itdef.net/pt-BR/learn/suntory-group-data-breach-2026ITDpt2026-11-07T14:30:00+09:00Vazamento de dados pessoais do Suntory Group (cerca de 90.000 funcionários e pessoal de parceiros, e outros grupos): nomes e e-mails vazados após acesso não autorizado a um serviço de nuvem externo, e o que candidatos e clientes devem fazer https://itdef.net/pt-BR/learn/credit-mutuel-arkea-cyberattack-2026ITDpt2026-11-07T12:00:00+09:00Ciberataque ao Crédit Mutuel Arkéa (França): transferências fraudulentas da própria conta via plataforma de um prestador de serviços, ativos dos clientes não afetados https://itdef.net/pt-BR/learn/digicert-validation-archive-breach-2026ITDpt2026-11-07T12:00:00+09:00Invasão de um sistema interno da DigiCert (autoridade certificadora): dados de contato de representantes de clientes e alguns documentos de identidade, e o que os clientes devem fazer https://itdef.net/pt-BR/learn/docomo-online-shop-my-docomo-data-breach-2026ITDpt2026-11-07T12:00:00+09:00Vazamento no docomo Online Shop e no My docomo da NTT DOCOMO (até cerca de 300.000 registros): números de documentos de identidade vazaram e o que os clientes devem fazer https://itdef.net/pt-BR/learn/nikke-pc-launcher-malware-2026ITDpt2026-11-07T12:00:00+09:00Arquivos do launcher de PC de GODDESS OF VICTORY: NIKKE foram adulterados e um programa malicioso foi distribuído: o que fazer se você usou a versão para Windows desde as 15:41 (JST) de 27 de setembro https://itdef.net/pt-BR/learn/openssh-10-6p2-password-auth-bypass-2026ITDpt2026-11-07T12:00:00+09:00Correção de emergência do OpenSSH 10.6p2 (CVE-2026-123158): contorno da autenticação por senha no sshd em sistemas com musl sem PAM, como o Alpine