JP — ITmedia

Yakult Honsha Website Suspended After Unauthorized Access; Impact on Customer Data Under Investigation

SecurityOctober 28, 20261 min read

Yakult Honsha, the Japanese drink and health company, has taken its official website offline after an unauthorized access (a hacking break-in). The company says the effect on customer information is still being checked.

What happened

Yakult Honsha's official website was hit by unauthorized access on the night of October 26, 2026. Since then, the site has been shown as "under maintenance," and none of its content can be viewed. The company has not said when the site will come back. It says it will report new information about possible effects on customer data as soon as it knows more.

Key facts

The maintenance notice was posted at 7:00 p.m. on October 26, 2026.
As of 11:00 a.m. on October 28, about 40 hours later, the site was still down.
No restart date has been announced.
The effect on customer information is still under investigation.

Some context

Yakult is well known for its milk-based drinks. The company also makes medicines and cosmetics. A website that is shut down like this can stop people from finding product details and company news. Unauthorized access means someone got into a computer system without permission. This can sometimes expose personal information, so companies usually check what data may have been taken.

Why it matters

A big company's website going dark for two days or more shows how serious a break-in can be. Customers want to know whether their personal details are safe. The story also comes after other Japanese companies and services reported similar break-ins, so it adds to a wider pattern of cyberattacks.

What to watch

Whether Yakult confirms that customer personal information was leaked.
When the website will be back online.
Any new details about how the attackers got in.
Whether other Japanese companies report similar attacks.

Securion's 'OnAV' Achieves 100% Malicious App Detection Rate, 39th AV-TEST Certification

Securion announced on the 28th that its Android antivirus solution 'OnAV' earned its 39th cumulative certification from AV-TEST, the global security product evaluation institute. OnAV recorded a 100% malicious app detection rate and scored 17 out of a possible 18 points in the evaluation. The company attributes this to its AI detection technology, the Cross Validation System (CVS), which combines machine learning, reputation, and pattern checks.

Security전자신문Oct 28

Creinity Responds to PHP Security Vulnerabilities, Highlights Java-Based Email Security Technology

Creinity, an AI-based email security and collaboration company, said its SpamBreaker inbound email security solution does not include a PHP runtime and is therefore not directly affected by the recently disclosed PHP vulnerabilities, which allow remote code execution without authentication. The company said its core components, including the mail processing engine and management console, are built on Java, and that SpamBreaker supports three-layer inspection along with SPF, DKIM, and DMARC sender authentication. Creinity also cited CC certification for SpamBreaker and GS certification for several other products.

SecurityZDNet KoreaOct 28

Oracle and OpenAI Team Up to Tackle AI Security Threats: "Find and Fix Vulnerabilities"

Oracle and OpenAI are combining their technologies to help enterprises detect, verify, and fix software vulnerabilities as AI agents spread. The companies unveiled "Oracle AI Security Mesh," which pairs OpenAI's cybersecurity AI models with Oracle's security testing tools and can run on OCI, other clouds, and on-premises systems. Actual changes are applied only after customer approval.

SecurityArs TechnicaOct 28

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

A memory-corruption flaw, tracked as CVE-2026-97631 and rated 9.5 out of 10, affects the TianoCore EDK II codebase used to build UEFI firmware for most server vendors and data centers. The bug lies in an ICMP component and can let attackers run malicious code before the OS and Secure Boot defenses load. Because AMI published a pull request with a fix before the coordinated disclosure date, TianoCore issued a public advisory last week, and the publicly available patch makes exploit development easier.