News
CVE-2026-70408: acmailer Flaw Lets Staff Accounts Become Admins
Japanese CompaniesSecurity
acmailer CVE-2026-70408 (CVSS 8.8) lets a sub-account create an admin. Fixed in CGI 4.1.2 / DB 1.2.2 — and if you no longer use acmailer, delete it entirely.
2026.08.1916 views
News
Ransomware at 157 Japanese retail stores: all reopened, points still down
Japanese CompaniesSecurity
REXT Corporation, which runs WonderGOO, Shinseido and WonderREX, was hit by ransomware on August 9. Registers, points and buybacks are still down on day five.
2026.08.1334 views
News
ANA Group's overseas shopping service has been down 12 days, with no word on what leaked
Japanese CompaniesSecurity
OCS FAMILY LINK SERVICE, the ANA Group's online shop for Japanese residents overseas, has been offline since 23 July after a cyberattack. As of 5 August the site does not respond, and neither the affected data fields nor the number of people involved has been published. Customers who depended on it for Japanese food and household goods have been without it for twelve days.
2026.08.0544 views
News
Two Flaws in Japan's NetKids iMark Network Monitor, and No Fixed Version Exists
InfrastructureJapanese CompaniesSecurity
Two vulnerabilities were disclosed in NetKids iMark, a Japanese-made network monitoring tool, on August 5, 2026. Anyone who can log in to the machine can seize SYSTEM privileges. Every build up to and including the current V5.2.5.0 is affected and no fix has shipped. Neither works over the internet, but a monitoring server holds the map of your network. Here are the two workarounds.
2026.08.0532 views
News
LINE for Android: viewing a profile could run code (CVE-2026-16881)
Japanese CompaniesMobileSecurity
A crafted LINE profile could run code with the app's privileges on Android. The vendor rates it 8.7. The fix shipped in 26.7.2 in early summer; how to check yours.
2026.08.0432 views
News
27 WordPress plugin flaws: CVE-2026-15383 hits a Japan-made plugin
DevelopmentJapanese CompaniesSecurity
27 WordPress plugin flaws went public Aug 3, 2026. One hits a Japan-made plugin on 9,000 sites: any visitor can plant script that runs in the admin dashboard. It was quietly fixed July 31.
2026.08.0328 views
News
Cybozu Garoon CVE-2026-57279 affects only 6.17.0 and 6.17.1
SecurityJapanese Companies
A cross-site scripting flaw in Cybozu Garoon affects just two package-edition releases, 6.17.0 and 6.17.1. Fixed in 6.17.2. Here is how to tell in one check.
2026.08.0325 views
News
Sharp printer flaw CVE-2026-60011 affects 164 models, 78 get no fix
SecurityJapanese Companies
A flaw in 164 Sharp multifunction printer models lets stored scans be read without logging in. 78 models are past firmware support and get no fix at all.
2026.08.0332 views
News
Tegalog flaw lets anyone log in as admin (CVE-2026-64940)
SecurityJapanese Companies
Tegalog, used on many Japanese personal sites, lets a stranger into the admin screen without logging in. Only version 4.9.0 is safe.
2026.07.2919 views
News
Three flaws across seven ELECOM Wi-Fi routers and access points (CVE-2026-59764)
SecurityJapanese Companies
Three flaws in seven ELECOM Wi-Fi routers and access points, July 28 2026. Fixed firmware shipped in May and June; the consumer models auto-update by default.
2026.07.2829 views
News
Ricoh Printers and MFPs Can Be Used as a Stepping Stone Into Your Network (CVE-2026-63226) — Update the Firmware if SSH Is On
SecurityJapanese Companies
A flaw in Ricoh printers and multifunction machines could let attackers use them as a passageway into a company's internal network. Only devices with the SSH remote-maintenance connection enabled are affected; if ignored, attacks can be relayed to other PCs and servers. Severity is medium, no exploitation has been reported, and updating the firmware fixes it.
2026.07.2336 views
News
Chiikawa Movie Tickets: Cinema Booking Sites Crash at Once in the Midnight Seat Rush
InfrastructureJapanese Companies
At midnight on July 21, as advance reserved-seat sales for the Chiikawa movie opened, cinema booking sites including TOHO Cinemas, AEON Cinema and United Cinemas went down one after another under a traffic surge. Here is what happened, why hit-title launches crash these sites, and what to do if you can't get through.
2026.07.2133 views
