Data breach exposes up to 14.2 million email logins at six ISPs

This collection of stories highlights multiple active and emerging threats: a KDDI data breach exposed up to 14.2 million email logins across six ISPs; AI-assisted coding agents can be tricked by apparently clean GitHub repos to execute hidden malware; FBI/CISA warn Russian-linked phishers are stealing Signal backup recovery keys to access historical messages; CISA issued an urgent patch deadline for an actively exploited Cisco Unified Communications Manager Server vulnerability; Polymarket customers lost ~$3M after a third‑party vendor supply‑chain compromise injected malicious frontend code;