KDDI – One Flaw, Six ISPs, 14 Million Exposed Mailboxes
Tech Talks With Kinsoft · Jun 25, 2026 · 18:29
Tech Talks With Kinsoft · Jun 25, 2026 · 18:29
Listen in the Podli app 🎧
Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.
A single vulnerability in one shared platform cascaded across six Japanese internet providers, exposing up to 14.2 million email accounts. Telecoms giant KDDI has confirmed a breach of a shared email system used by KDDI, JCOM, NIFTY, BIGLOBE and others — an intrusion via a flaw in third-party software. We look at "shared-infrastructure blast radius": how concentration risk turns one weakness into millions of victims, why exposed email logins are gold for credential-stuffing, and the transparency questions KDDI has left unanswered.
Do you know how many of your services depend on one shared platform? Visit www.kinsoft.com.au to talk through your security and IT needs.
Sources: BleepingComputer; SecurityAffairs; The Japan Times.
Episodes: Tech Talks With Kinsoft
