News
KFC Japan: Shortages and Closures Across All Stores — Cause Is Unauthorized Access at Nichirei
SecurityInfrastructureJapanese Companies
In July 2026, KFC Japan announced that stores nationwide may face out-of-stock items, restricted menus, and temporary closures. The cause is a system failure from unauthorized access at Nichirei, the logistics company it uses for ingredient distribution. Online ordering and delivery are suspended too. Here is the timeline of how one company's cyber incident stopped a whole restaurant chain.
2026.07.15118 views
Roundup
Microsoft Patch Tuesday August 2026: Two Things to Apply First
SecurityInfrastructure
A monthly page that distills Microsoft's Patch Tuesday down to what corporate IT teams must apply first. For July 2026, two unauthenticated takeovers in on-prem SharePoint Server (9.8 each) lead the list, with remote code execution in Exchange, Active Directory, DHCP, and SQL Server also needing attention. Includes a per-product quick-reference table.
2026.07.1567 views
News
Argo CD's Default Config Lets an Insider Hijack Your Whole Kubernetes Cluster — CVE-2026-15416, Update the Chart to v10.0.0
SecurityDevelopmentInfrastructure
A flaw in Argo CD lets an attacker with a foothold inside the network take over the entire server platform it manages. CVE-2026-15416, rated 8.9 out of 10. Used by roughly half of all GitOps shops, it needs the distribution chart updated to v10.0.0, or the traffic-restriction setting turned on.
2026.07.1472 views
Roundup
A Cyberattack Stopped the Flow of Frozen Food: Why an IT Failure Stops "Things" From Moving, and How to Prepare
InfrastructureSecurity
In July 2026, frozen-food giant Nichirei suffered a system failure from unauthorized access, impacting cold-storage in/out operations and frozen-food shipping. Using the case as an entry point, we explain why an IT failure stops a physical thing like frozen food from shipping, and what logistics and manufacturing can do so the business doesn't fully halt — from warehouse management systems (WMS), the cold chain, manual fallback, and OT/IT separation.
2026.07.1497 views
Roundup
The Phone Stopped, the App Kept Running: System Separation That Survives an Attack, and the First Response That Stops the Spread
SecurityInfrastructure
In July 2026, Nihon Kotsu suffered unauthorized access (malware), halting phone dispatch and the labor-taxi registration form, while the GO app stayed up. Using that split as an entry point, we explain the first response of network isolation that stops the spread, and why some services survive at the same company — system separation and redundancy — from a hands-on operations view, with a checklist for businesses and preparations for users.
2026.07.1441 views
Roundup
One VPN, and a Company's Financial Close Stopped: How a Cyberattack Halts Securities Filings, and How to Defend
InfrastructureSecurity
The March 2026 cyberattack on Omikenshi ran from a VPN intrusion to a ransomware core-system halt and a delayed securities report. Using the case as an entry point, we explain how to prevent VPN intrusion and why a cyberattack stops the financial close and securities filing — from both KEV exposure data and Japan's Financial Instruments and Exchange Act, with a hands-on checklist (MFA, patching, segmentation, Zero Trust).
2026.07.1445 views
News
July 13, 2026 Security Vulnerability Roundup: Takeovers in a Wireless Router and Industrial Gear — Does It Affect You?
InfrastructureSecurity
A roundup of three July 13, 2026 vulnerabilities rated 9.0 or higher. The Comfast wireless router can be taken over with no login yet has no fix, the WAGO industrial device has a hidden feature, and the Centreon monitoring tool has a critical flaw. Most target product operators. Also covers the same-day LINE bug so you can check what affects you.
2026.07.1356 views
News
Exploit code published for mcp-server-kubernetes CVE-2026-61459 — and scanners stay silent
SecurityAIInfrastructure
mcp-server-kubernetes, a popular tool that lets AI assistants operate Kubernetes, has a critical flaw (CVE-2026-61459, severity 9.8): unauthenticated argument injection redirects kubectl and steals the cluster admin's credentials. Versions before 3.9.0 are affected. Update now.
2026.07.1139 views
News
Five unauthenticated FortiSandbox flaws, two exploited in the wild
SecurityInfrastructure
Fortinet FortiSandbox, the appliance handling corporate malware defense, has four unauthenticated severity-9.8 takeover flaws. CVE-2026-39808 has a public PoC and confirmed exploit evidence, and another is under observed attack. The device meant to defend could become the way in, so operators should update to the latest fix immediately.
2026.07.0845 views
News
Citrix NetScaler Leaks Data Before Login (CVE-2026-8451): 'CitrixBleed' Is Back and Under Active Attack
InfrastructureSecurity
Citrix NetScaler, the appliance many companies use to connect staff to internal systems, has a flaw (CVE-2026-8451, severity 8.8) that leaks internal data before login. A comeback of the 2023 'CitrixBleed' that caused mass breaches, it was exploited within 24 hours of disclosure. Stolen keys let attackers impersonate employees, so update and terminate all sessions.
2026.07.0854 views
News
Oracle E-Business Suite Can Be Hijacked Without a Password (CVE-2026-46817): Actively Exploited, Patch Now
InfrastructureSecurity
Oracle E-Business Suite, the core business software running accounting, payments and HR for large enterprises and governments, has an unauthenticated takeover flaw (CVE-2026-46817, severity 9.8) that is already under active attack. About 950 instances are exposed worldwide. It can leak payment and personal data, so apply Oracle's May 2026 fix immediately.
2026.07.0855 views
News
July 7, 2026 Security Vulnerability Roundup: Dell, Red Hat, Kubernetes Infra and More — Does It Affect You?
InfrastructureSecurity
A one-day roundup of the July 7, 2026 vulnerabilities we did not cover individually. Six items including Dell PowerProtect Data Domain and Red Hat SSSD, organized so you can judge relevance by whether a login is required. This day was enterprise-server focused with no consumer-facing emergency; we explain what operators should prioritize.
2026.07.0836 views
