Iris Ohyama data cloud breach exposes info of 7.7 million customers

A BleepingComputer security-news feed covering major breaches, active exploitation, phishing, malware distribution, zero-days, supply-chain attacks, and industrial-control-system targeting. Notable items include an exploited SonicWall SSL-VPN MFA bypass, QNAP devices breached through Plex2Shell, D-Link switch zero-days, exposed customer credentials and tokens at Chainalysis, large-scale personal-data exposure at Iris Ohyama, financial fraud against Crédit Mutuel Arkéa, and phishing campaigns targeting Microsoft and Google accounts.