Cybersecurity Incident

Coupang continues to bear costs from a prior-year data breach, with customer compensation and regulatory pressure (a 624.7 billion won FTC fine) weighing on profitability; accumulated operating losses for the first nine months of the year reached 1.83 trillion won.

curated · 2026-11-04 · context →

A China-aligned threat actor (SlippyNunchucks) hijacked DNS requests abusing insecure HTTP communications in the Windows version of Sogou Input Method to deliver the DarkVigil backdoor in a surveillance campaign observed since July 2026.

Leadership read: A breach is a governance event before it is a technical one. For Sogou in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-11-04 · context →

French bank Crédit Mutuel Arkéa is reported to have been targeted in a crypto theft of about $133M.

Leadership read: A breach is a governance event before it is a technical one. For Crédit Mutuel Arkéa in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a…

curated · 2026-11-04 · context →

French bank Credit Mutuel Arkea reported to have been hit by a cyberattack.

curated · 2026-11-04 · context →

Nearly 30 Indian investors allege unauthorised access to US-stock brokerage accounts on the Stockal platform, with holdings sold without consent and proceeds moved into Zhibao Technology (ZBAO) shares that later lost about 60% of value. Stockal attributes the access to phishing of customer credentials; DriveWealth, the US brokerage partner holding the accounts, points to security weaknesses at Stockal. Complaints filed with SEBI, the US SEC and Bengaluru police.

Leadership read: A breach is a governance event before it is a technical one. For Stockal Securities in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a…

curated · 2026-11-04 · context →

Collapsed Australian transcription provider VIQ faces a regulator-acknowledged possible security breach tied to court transcription work performed in India. The OAIC will not pursue the liquidated provider.

Leadership read: A breach is a governance event before it is a technical one. For VIQ in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-11-04 · context →

Nigerian fintech Lendsqr reports a series of cyberattacks beginning October 30, including an initial wave on a customer call, with attempts traced to Mexico, the United States and parts of Asia. No funds were reportedly lost, but the CEO warns the risk persists and attacks are growing faster and more sophisticated, including AI-enabled.

curated · 2026-11-04 · context →

Hackers took control of cold-room systems at three sites of France's national blood service and pushed temperatures to extreme levels; alarms caught the change before plasma or samples were damaged.

curated · 2026-11-04 · context →

Polkadot treasury lost about $1.38M after an XCM patch missed production; a flaw distorted DOT/dotUSD pool pricing, and a later upgrade repaired stablecoin supply accounting.

Leadership read: A breach is a governance event before it is a technical one. For Polkadot in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that…

curated · 2026-11-04 · context →

Norad, Norway's Agency for Development Cooperation, disclosed a breach of its Grants Portal; hackers may have accessed names and email addresses of all 20,614 registered users after entering through 27 misused user accounts. A police report has been filed and the portal was shut down.

curated · 2026-11-04 · context →

Postman reportedly auto-installs AI plugins without clear user consent and attempts to share all API data, per a user-filed GitHub support issue that drew wide Hacker News attention.

curated · 2026-11-03 · context →

Hackers breached Harvard University's Alumni Affairs and Development systems in November 2025, stealing data linked to more than 850,000 unique email addresses, per Have I Been Pwned.

curated · 2026-11-03 · context →