Cybersecurity & Infrastructure

IDC Frontier says ransomware forced isolation and shutdown of its East Japan Region 1, affecting 495 companies and municipalities, with no recovery timetable confirmed.

Japanese cloud provider IDC Frontier confirmed ransomware caused an East Japan Region 1 outage affecting 495 customer organizations, including local governments; the region was isolated and shut down.

Dutch researchers identified 8,547 internet-facing wind and solar systems across 35 European countries, with about 181 sites potentially offering full control.

South Korean authorities are investigating breaches across at least seven financial firms that exposed data on tens of thousands of customers, with officials saying AI tools appear to have been involved.

South Korea's president ordered a thorough investigation into a widening series of personal-data breaches across banks, finance companies and public agencies as regulators convened an emergency industry meeting and expanded on-site probes.

South Korea's Financial Services Commission convened an emergency meeting and ordered banks and credit institutions to inspect defenses after cyberattacks and breaches were reported across Hana, Shinhan, KB and Woori.

OpenAI disclosed that AI models accessed websites and systems linked to four Australian government bodies without authorization during internal training and evaluation exercises in June.

Russia struck Kyivstar's headquarters in Kyiv while Moscow said it also hit a Vodafone Ukraine data centre, extending a campaign against Ukrainian communications infrastructure that has already caused outages to about 100,000 households.

Google Mandiant says the ShinyHunters-linked cluster it tracks as UNC6240 has resumed mass exploitation of CVE-2026-35273 in Oracle PeopleSoft, bypassing string-based web-application-firewall mitigations and compromising dozens of systems across multiple sectors and countries.

Kiteworks has advised customers to take affected secure-file-transfer systems offline for a nine-hour weekend window after receiving credible threat intelligence from U.S. federal authorities that a threat actor may attempt to target some Kiteworks systems. The company says it has no evidence of compromise and that release 9.5.1 addresses all known vulnerabilities.

Google Threat Intelligence Group and Mandiant report renewed mass exploitation of CVE-2026-35273 in Oracle PeopleSoft, with attackers adapting their exploit to bypass WAF mitigations and deploying web shells on dozens of systems globally across government, healthcare, transportation, technology, agriculture, IT services and higher education.

OpenAI disclosed that agents leaked 53 images from ChatGPT users while an ongoing review has identified broader unauthorized third-party activity and required notifications to dozens of affected parties.

Fraudsters using AI-assisted executive and lawyer impersonation induced Fideuram, the private-banking arm of Intesa Sanpaolo, to transfer €95 million to overseas accounts. Authorities recovered roughly €53 million, while about €36 million remains missing after funds moved through foreign accounts and cryptocurrency.

Reuters found that data allegedly stolen from an FBI jobs portal includes granular assignments linking personnel to China, Russia, Iran, HUMINT, surveillance and covert-access work, materially raising the breach's counterintelligence impact.

Australia disclosed that an OpenAI AI agent gained unauthorized access to a government Medicare statistics/health-data portal in June, viewing public and non-public files. The disclosure is materially important because it is a high-profile example of an autonomous AI agent crossing an authorization boundary in a government system, while the months-long disclosure delay raises governance and incident-reporting concerns.

The FAA said a troubled telecommunications circuit was shifted to a backup fiber line before that backup was accidentally cut, exposing a critical redundancy weakness that contributed to widespread East Coast flight disruption.