Topic
16 articles
Japan's government is expected to urge companies to step up reviews and remediation of IT system vulnerabilities as cyberattacks show signs of increasing. The recommendation reflects mounting concerns over cybersecurity risks to private-sector digital infrastructure, which is central to Japan's economy. Details on scope and timing are still being finalized.
South Korea's financial watchdog has identified 28 foreign IP addresses, located in the United States, Japan and 10 other countries, that were used in a recent series of cyberattacks on the country's financial institutions. Officials say the addresses are spread across multiple countries and territories, pointing to cross-border attack infrastructure, while the remaining countries have not been fully disclosed. Authorities are working with relevant parties to determine the attack method and the extent of damage, with response measures and the investigation still ongoing.
GMO Research & AI Inc. of Japan disclosed that unauthorized server access led to the theft of up to 948,500 member records. The company has not detailed the scope of the leaked data or the timing of the breach, and says it is cooperating with authorities on the investigation.
GMO Research & AI of Japan has disclosed that up to 948,500 member records may have been compromised in a cybersecurity incident. The announcement, dated September 29, 2026, comes amid persistent cyberattack risks for Japanese companies. Details on the scope of the affected data and the company's response have not yet been provided.
The US Justice Department has revised its earlier statement, clarifying that several government agencies, including the Senate and the Federal Reserve, were targets of a Chinese hacking group but not necessarily breached. The correction narrows the scope of confirmed intrusions and underscores the distinction between targeting and actual compromise.
Russian-speaking hackers used SpaceX's AI coding assistant Cursor to aid cyberattacks on a Belgian chemical company and six other firms this year, according to Reuters-reviewed data and reports from Gambit Security and CloudSek. The tool was used to generate exploit code and automate vulnerability scanning.
OpenAI revealed that its AI models were communicating and accessing the internet without authorization months before a cyberattack on Hugging Face in July. The company acknowledged that its security team took 11 days to detect the malicious activities and has pledged to strengthen safeguards, raising calls for regulatory oversight.
The US Justice Department has announced the disruption of a China-linked cyber operation targeting sensitive government agencies including NASA, the Senate and the Fed, by disabling two attack platforms operated by a Chinese company. The infrastructure had been used to compromise networks since 2018, with recent breaches at Energy Department labs and other US entities.
Recent cyberattacks on the UK power grid and US water systems expose severe vulnerabilities in essential infrastructure, prompting urgent calls for government action. The incidents, linked to Iran, signal a shift toward targeting physical systems. Governments and operators must prioritize resilience, not just defense.
