Data breach exposes up to 14.2 million email logins at six ISPs

Multiple high-impact incidents reported: KDDI disclosed a data breach exposing up to 14.2 million email logins across six ISPs. The FBI and CISA warn of phishing campaigns tied to Russian actors stealing Signal Backup Recovery Keys (risking historical message access). CISA issued an urgent patch deadline for an actively exploited Cisco Unified Communications Manager Server vulnerability. Other notable events include a malicious script injected via a third‑party vendor that cost Polymarket customers ~$3M, clean-looking GitHub repos that can trick AI coding agents into executing hidden malware,盗