You have got to be KDDI-ng – Japanese telco exposes 14.2 million managed email credentials

theregister.com Jun 24, 2026

You have got to be KDDI-ng – Japanese telco exposes 14.2 million managed email credentials

Curated by Shubham · TechCapsules · Jun 24, 2026

AI-summarised brief · reviewed before publication

Japanese telco KDDI has exposed 14.2 million managed email credentials after an attacker accessed its email system on June 17th. The company detected unauthorized access and prevented further intrusion on the same day, but fears that up to 14.2 million email addresses and passwords may have leaked. KDDI had hashed and encrypted the passwords, but warns that users may be at risk of phishing and identity theft. The compromised email service is used by KDDI and several Japanese ISPs, including STNet, JCOM, and BIGLOBE.

💡 Why It Matters

· The breach highlights the risks of outsourcing sensitive services, as KDDI's failure to secure its email platform has put millions of users at risk.
· The incident also underscores the growing threat of cybercrime in Asia and the Pacific, where cyber offenses now account for a third of all crime.

Capsules Cybersecurity

Read full article on theregister.com

New macOS security flaw could let hackers disable protection tools, researchers say

Researchers at XM Cyber discovered a macOS technique that allows standard user accounts to disable certain enterprise security tools without administrator credentials. The method exploits trusted macOS communication channels and has been successfully tested against CrowdStrike Falcon and Kandji on macOS. The attack requires physical access to a standard user account on the target Mac, limiting its reach but still posing a significant threat to security.

💡 The existence of this vulnerability highlights the importance of secure account management in macOS environments, particularly in enterprise settings where attackers often target monitoring tools to remain undetected.

tekedia.com · Jun 24

Five Eyes Warn AI-Powered Cyberattacks Are Months Away as Governments Race to…

The Five Eyes intelligence alliance has issued a stark warning about the potential of artificial intelligence to accelerate cyberattacks within months. The alliance, comprising the US, UK, Canada, Australia, and New Zealand, cautioned that frontier AI models could significantly enhance offensive cyber capabilities, creating risks for governments, businesses, and critical infrastructure operators worldwide. Security experts warn that advanced AI systems can automate tasks that previously required highly skilled hackers, making the threat landscape more dangerous. The alliance urged organizations to strengthen cyber hygiene practices and deploy AI technologies to identify weaknesses and respond faster to attacks.

💡 The Five Eyes warning highlights the urgent need for governments and organizations to adapt to the rapidly evolving cybersecurity threat landscape. As AI-powered cyberattacks become increasingly sophisticated and automated, the stakes for global security and economic stability are higher than ever, making it imperative for defenders to stay ahead of the curve.

thequantuminsider.com · Jun 24

STMicroelectronics Launches ST54M Post-Quantum Security Chip for Mobile Devices

STMicroelectronics has introduced the ST54M, a secure mobile chip designed to meet future quantum-resistant security requirements for smartphone and connected-device manufacturers. The chip combines NFC, secure element, eSIM functionality, and a hardware accelerator for post-quantum cryptography, supporting services such as payments, digital identity, and digital car keys. Sampling is available now, with production targeted for July 2026. The ST54M supports PQC algorithms including ML-KEM and ML-DSA, and has completed certification testing under Common Criteria 2022 EUCC and EMVCo.

💡 The ST54M's post-quantum cryptography capabilities will help mitigate the risk of future quantum computer attacks on mobile devices, protecting sensitive user data and financial transactions.

thequantuminsider.com · Jun 24

Symmatrics Launches Quantum-Secure VPN for Enterprise Networks

Symmatrics launched its Quantum Protected Network (QPN), a VPN platform designed to reduce risks associated with stolen credentials, long-lived session keys, and future quantum-enabled decryption threats. The QPN uses device authentication and one-time-use symmetric keys instead of traditional credential-based access methods. It supports secure TCP and UDP traffic, device-based access controls, and continuous key rotation without requiring application changes or network redesign. The platform is built for organizations managing private cloud infrastructure and remote employees who require secure access to internal resources.

💡 The QPN's innovative approach to secure access eliminates common attack vectors, reducing the likelihood of unauthorized access and protecting encrypted traffic from both current threats and future decryption attempts.

newstalkzb.co.nz · Jun 24

Auckland mother’s tragedy misused as fake AI news content fuels safety warnings

A grieving Auckland mother, Shara-Lee Porter, has spoken out after her story was misused as fake AI news content, causing her additional stress. Her son, Tyler Porter, died in a devastating incident last year. AI-generated "news" pages are becoming increasingly widespread on social media feeds, sparking warnings from NetSafe. These pages use existing stories, rewrite them with AI, and publish them with fake images, often appearing legitimate. The phenomenon has raised concerns about the potential effects on unsuspecting individuals and the importance of accurate storytelling. NetSafe has warned of knock-on effects if society loses faith in online content.

💡 Fake AI content erodes trust in online information, undermining the credibility of real news sources. It also exploits vulnerable individuals, like Shara-Lee Porter, who are already experiencing immense grief.

telecom.economictimes.indiatimes.com · Jun 23

India’s Tata Electronics hit by cyber breach claiming to expose Apple, Tesla…

India's Tata Electronics has been hit by a cyber breach, claiming to expose trade secrets of major clients Apple and Tesla. The breach is a significant setback for Apple's supply chain in India, where Tata is already facing scrutiny over alleged contamination of farmlands near one of its iPhone parts plants. The incident highlights concerns over cybersecurity in India's technology sector. Tata Electronics is a key manufacturer of components for Apple's iPhone. The breach may have implications for the companies involved and their operations in India. Details of the breach are still emerging, with Tata Electronics yet to comment on the incident.

💡 Exposure of trade secrets could give competitors an unfair advantage, undermining the businesses of affected companies. Vulnerabilities in India's technology sector may deter foreign investment.