KDDI Data Breach Impacts up to 14.2 Million Email Accounts at Six ISPs

Multiple high-impact security incidents and research items: KDDI disclosed a breach that exposed up to 14.2 million email accounts across six Japanese ISPs after attackers exploited a third‑party software vulnerability. Polymarket suffered a third‑party compromise that enabled malicious code injection and ~$2.94M in crypto theft. JFrog published a working exploit for DirtyClone (Linux kernel privilege escalation, CVE-2026-43503, CVSS 8.8). CISA added Cisco/PTC flaws (including CVE-2026-12569) to its Known Exploited Vulnerabilities catalog. Additional coverage includes FBI/CISA warnings about S