Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches
2026-09-30T02:51:37Z•d45fc801768a40aeaad84145a7ad49598b7676c7989d6a8e9e387d1e753b7db1
CVE-2026-48842CVE-2026-86950CVE-2026-88771AI securityAPI keysAppleAzureCISA KEVCitrix NetScalerRoundcubeSQL injectionShinyHuntersactive exploitationagentic ransomwarecloud securitycritical infrastructurecybercrimedata breachgovernmenthealthcareidentity theftinfostealerrailwayransomwareremote code executiontargeted attackszero-day
What happened
Security news roundup covering ransomware and data breaches affecting Japanese rail operators, a Pentagon personnel agency and DC healthcare beneficiaries; exploitation of Apple CoreGraphics zero-day CVE-2026-86950; ShinyHunters law-enforcement activity; infostealer targeting of AI credentials and sessions; Azure identity abuse by Storm-3168/JADEPUFFER; and active exploitation of Citrix NetScaler and Roundcube vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- d45fc801768a40aeaad84145a7ad49598b7676c7989d6a8e9e387d1e753b7db1
- Enrichment time
- 2026-09-30T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.