Data & infrastructure
-
Kiteworks acquisition adds 500 Japanese customers
Kiteworks has acquired WAMNET Japan, establishing a direct Japanese operation and adding more than 500 enterprise customers to its secure data-exchange business.
-
Router implant exposes unencrypted root access
VulnCheck found an unauthenticated remote-control implant running as root in 20 Zbtlink router models, with no vendor fix identified.
-
Beacon breach exposes charity data backups
Beacon says compromised credentials were used to copy customer database backups, which investigators believe were probably downloaded.
-
Intermarché breach exposes 287,605 customer records
Unauthorised access to Intermarché’s Drive service exposed identity, contact, loyalty, and order information belonging to 287,605 customers.
-
TP-Link provisioning flaws expose network control
Fifteen newly disclosed vulnerabilities show how weaknesses in automated TP-Link device enrolment could be chained against controllers, cloud services, credentials, and managed network infrastructure.
-
Apple renews challenge to UK encryption order
Apple has filed another UK legal challenge over a technical capability notice reportedly seeking access to encrypted iCloud backups belonging to British users.
-
INC linked to SonicWall exploitation campaign
Researchers have linked INC ransomware activity to attacks exploiting two SonicWall SMA 1000 vulnerabilities, although the vendor has not publicly attributed the campaign.
-
N-central attackers reached managed endpoints
Attackers exploited N-able’s N-central platform, obtained administrative access, and used its remote-control capability to connect to endpoints inside customer-managed environments.
-
UKGI file exposed officials’ work details
A UK Government Investments file containing management information and the work details of 51 officials remained publicly accessible for around 40 hours after a policy failure.
-
Liechtenstein attack exposes ownership register data
Attackers copied beneficial-owner data relating to around 31,000 legal entities, while Liechtenstein suspended several other government systems to check for wider exposure.