ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting

  1. Oct 16, 2026 · Security Affairs

    Burger King Japan Confirms Data Breach Affecting 11 Million Customers

    Burger King Japan has reported a significant data breach, compromising the personal information of over 11 million app users.

    What changed

    In early October, Burger King Japan experienced a data breach that exposed the personal information of approximately 11.18 million users of its mobile application. The breach was attributed to unauthorized access to the company's membership system.

    • The breach involved sensitive personal data, raising concerns about user privacy.
    • Burger King Japan has initiated an investigation to assess the full impact of the breach.
    • The company is working to enhance security measures to prevent future incidents.

    Who is affected

    The breach primarily affects users of the Burger King Japan mobile application, which has a significant user base.

    Individuals who registered for the loyalty program are particularly at risk due to the nature of the exposed data.

    • Approximately 11.18 million app users are directly impacted.
    • Customers who shared personal information, including contact details and payment information, are at risk.
    • The breach may also affect Burger King Japan's reputation and customer trust.

    What to do

    Users of the Burger King Japan app should monitor their accounts for any suspicious activity and consider changing their passwords.

    It is advisable for affected individuals to remain vigilant against potential phishing attempts or identity theft.

    • Change passwords and enable two-factor authentication where possible.
    • Stay informed about updates from Burger King Japan regarding the breach.
    • Consider using credit monitoring services to detect any unauthorized use of personal information.

    Original report

  2. Oct 16, 2026 · DataBreaches.net

    Insider Threat: NHIS Employee Dismissed for Data Breach

    An NHIS employee has been terminated for selling subscriber data, yet affected individuals remain uninformed about the breach for three months.

    What changed

    A significant insider threat has emerged within the National Health Insurance Service (NHIS) as an employee was dismissed for selling sensitive personal information of health insurance subscribers. This breach highlights the vulnerabilities associated with insider threats and the need for stringent data protection measures.

    Despite the termination of the employee involved, victims of this data breach have not been notified for an extended period, raising concerns about transparency and compliance with data protection regulations.

    Who is affected

    The breach primarily impacts subscribers of the National Health Insurance Service, whose personal data was sold without consent. This incident underscores the risks faced by individuals when their sensitive information is mishandled by trusted entities.

    Additionally, the incident may affect the NHIS's reputation and trust among its users, potentially leading to a decline in subscriber confidence.

    • National Health Insurance Service (NHIS) subscribers
    • Individuals whose personal health information was compromised
    • The NHIS organization itself, facing reputational damage
    • Regulatory bodies monitoring compliance with data protection laws

    What to do

    Organizations should conduct thorough audits of their internal data access policies to mitigate the risk of insider threats. Implementing stricter access controls and monitoring systems can help prevent unauthorized data access and sales.

    Additionally, it is crucial for organizations to establish clear communication protocols to inform affected individuals promptly in the event of a data breach, ensuring compliance with relevant data protection regulations.

    • Review and strengthen internal data access policies
    • Implement monitoring systems to detect unauthorized access
    • Establish protocols for timely notification of affected individuals
    • Enhance training for employees on data protection and compliance

    Original report