Cybersecurity

Japan Logged 19,417 Data-Breach Reports in FY2025 — What the Second-Highest Total on Record Does and Doesn't Tell You

Japan's privacy regulator recorded 19,417 breach notifications in FY2025, the second-highest on record but down 7.6% year-on-year. The number is a reporting-volume metric shaped by notification rules, not a measure of harm — and reading it correctly matters.

20 Jul 2026 · 5 min read

Cybersecurity

Two Rival Powers, One Police Force: Researchers Say China- and India-Linked Groups Separately Spied on Pakistani Law Enforcement

SentinelLabs reports that suspected China-nexus and India-nexus groups ran separate espionage campaigns against Pakistani police between 2024 and 2026, sometimes hitting the same systems. The findings are the firm's assessment; China denies involvement and India did not comment.

20 Jul 2026 · 6 min read

Cybersecurity

Taiwan Charges Two Executives Over a LINE-Account Leasing Scheme Prosecutors Link to Chinese Cyber-Espionage

Taiwanese investigators have issued deferred prosecution orders against two executives who, prosecutors allege, leased local LINE accounts to a firm tied to China's cyber forces so operators could impersonate journalists. The charges are unproven and the accused have not publicly responded.

20 Jul 2026 · 5 min read

Cybersecurity

£29 Million of Damage From a Phone Call: Two Scattered Spider Members Jailed Over the TfL Hack

Two Scattered Spider members were sentenced to five and a half years each on 16 July for the 2024 Transport for London attack. There was no zero-day — just a bought credential and a phone call to the helpdesk. That is the uncomfortable lesson.

20 Jul 2026 · 6 min read

Cybersecurity

Microsoft's Largest-Ever Patch Tuesday: 600-Plus Fixes, Two Live Zero-Days, and a Triage Problem

Microsoft's July update fixed more than 600 CVEs — its biggest ever — including two zero-days already under attack in AD FS and SharePoint. The two exploited bugs score modestly but sit in the identity and document layers, and the volume itself is the new problem.

20 Jul 2026 · 6 min read

Cybersecurity

A Cyberattack on One Cold-Chain Operator Emptied KFC Japan's Shelves — the Cost of a Single Logistics Chokepoint

Nichirei, Japan's largest cold-chain logistics operator, was hit by a cyberattack on 13 July. Containing it meant disconnecting systems — which halted frozen-food shipments and left KFC Japan's 1,300-plus stores facing shortages. A supply-chain lesson in physical form.

20 Jul 2026 · 5 min read

Cybersecurity

A Nuclear Plant's Blueprints Leaked — but the Breach Was at a Contractor, Not the Reactor

An extortion group posted files it claims come from a Kudankulam contractor's servers. India says no nuclear safety systems were touched — the breach hit Reliance data hosted at a third-party data centre. The real lesson is fourth-party risk.

20 Jul 2026 · 6 min read

Cybersecurity

Qantas Was Breached, but Australia's Privacy Regulator Declined a Formal Investigation — Governance Was the Deciding Factor

Australia's privacy regulator closed its inquiry into the 2025 Qantas breach on 16 July without opening a formal investigation, finding the airline took reasonable steps despite the incident. The decision sets a marker: regulators are judging governance, not just outcomes.

20 Jul 2026 · 5 min read

Cybersecurity

How to Check if an AI Tool Is Safe for Company Data (2026)

Consumer AI tiers train on your data; business tiers don't. A 10-minute vetting workflow for SMEs, with ASEAN PDPA anchors and nine red flags.

14 Jul 2026 · 10 min read

Cybersecurity

One PeopleSoft Zero-Day, 100-Plus Victims: The July Breach Disclosures Trace to a Single Oracle Flaw

Nissan, NAIC and a wave of universities are disclosing breaches that trace to one Oracle PeopleSoft zero-day, CVE-2026-35273, exploited by ShinyHunters before Oracle's June patch. Patching now does nothing for data already taken.

11 Jul 2026 · 7 min read