Nikkei discloses third data breach in a month, 1.8M records exposed
2026-10-20T07:23:21Z•db8b830d5e762ce77b76f445fab3b3a4c8593ca419705d86d825dd6eb6dc5483
CVE-2026-103849AOMEIAPI key exposureAdobe CommerceCandiru spywareConnectWiseDrupalKYC fraudMagentoMicrosoft 365NGINXRank MathSiteGuard WAFWordPresscommand injectioncyberattackdata breachmalware distributionremote code executionsupply-chain attackzero-click exploit
What happened
Security news digest covering major incidents and vulnerabilities, including supply-chain compromises of WordPress Rank Math PRO and ConnectWise Cloud Backup, critical remote-code-execution flaws in NGINX, Drupal, SiteGuard WAF, and Magento/Adobe Commerce, malware distribution through hijacked AOMEI update infrastructure, spyware delivered via zero-click targeted advertising, and multiple data breaches and service disruptions.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- db8b830d5e762ce77b76f445fab3b3a4c8593ca419705d86d825dd6eb6dc5483
- Enrichment time
- 2026-10-20T07:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.