Breaches, vulnerabilities, ransomware and the people and tools that respond.
Sony Network Communications says an October 19 intrusion exposed more than 2.58 million So-net and plala member records, 54,401 email passwords and 16 bank account records.
1Password now creates passkeys using ML-DSA, a NIST post-quantum signature algorithm, for sites that support it. FIDO says passkeys now account for 36% of successful sign-ins.
Microsoft's October 13 updates fix more than 1,400 flaws, including CVE-2026-96951, an actively exploited Windows Shell bug that bypasses Mark of the Web protection.
Version 0.5.144 of the tensorlake npm SDK shipped a Shai-Hulud worm variant that steals developer and cloud credentials and can wipe home directories if its stolen GitHub token is revoked.
A Hamburg-led operation seized KillSec's servers, leak site and at least 110 TB of data, with three provisional arrests. Police say a 16-year-old is the suspected main operator.
