KDDI Data Breach Impacts up to 14.2 Million Email Accounts at Six ISPs

This feed covers multiple high-impact security incidents and advisories: KDDI disclosed a breach that exposed up to 14.2 million email accounts across six Japanese ISPs after attackers exploited a third‑party software vulnerability. CISA added critical/actively exploited flaws in Cisco and PTC Windchill/FlexPLM (including CVE-2026-12569) to its KEV catalog. JFrog published an exploit walkthrough for DirtyClone (CVE-2026-43503), a Linux kernel privilege escalation (CVSS 8.8) that can escalate to root without leaving disk traces. Additional notable items: FBI/CISA warnings that Russian actors ex