After attackers used credentials stolen from GMO's Onamae.com Desktop Cloud to drain FX accounts, GMO asked Japan's government on October 24, 2026 to invoke active cyber defense. What the new police neutralization clause allows against non-state criminals, the approval steps, the international-law problem with servers abroad, and what is likely to happen.
May 26, 2026 GitHub Actions auth outage (2h21m): stalled runs, action downloads, running jobs, and cron. Actions' 2nd May incident, separate from May 15's service discovery RCA.
In its April 23 update, Vercel disclosed customer accounts compromised prior to and independently of the Context.ai incident. Covering the Lumma Stealer infection path, the ShinyHunters $2M BreachForums listing, and what non-sensitive environment variables actually mean.
Vercel's official incident disclosure published on April 19, 2026. A walk-through of how a compromise of Context.ai's Google Workspace OAuth app led to Vercel employee account takeover and access to environment variables in some customer projects, plus the checks users should run right now.
