Data breach exposes up to 14.2 million email logins at six ISPs

A set of emerging security incidents and trends: KDDI disclosed a breach exposing up to 14.2 million email logins across six Japanese ISPs; CISA issued an urgent patch deadline for a Cisco Unified Communications Manager Server vulnerability actively exploited; a supply‑chain compromise at a third‑party vendor led to a $3M loss at Polymarket; Russian-linked actors are phish‑targeting Signal users to steal backup recovery keys; attackers are abusing clean GitHub repos and AI coding agents to smuggle and run malware; new macOS ‘Gaslight’ malware attempts to evade AI analysis; and adversaries are採