KDDI – One Flaw, Six ISPs, 14 Million Exposed Mailboxes

A single vulnerability in one shared platform cascaded across six Japanese internet providers, exposing up to 14.2 million email accounts. Telecoms giant KDDI has confirmed a breach of a shared email system used by KDDI, JCOM, NIFTY, BIGLOBE and others — an intrusion via a flaw in third-party software. We look at "shared-infrastructure blast radius": how concentration risk turns one weakness into millions of victims, why exposed email logins are gold for credential-stuffing, and the transparency questions KDDI has left unanswered.Do you know how many of your services depend on one shared platform? Visit www.kinsoft.com.au to talk through your security and IT needs.Sources: BleepingComputer; SecurityAffairs; The Japan Times.