Daily brief · 2026-10-08
5 Critical Security Fixes for Oct 8
Cisco NX-OS Software
Cisco released an advisory for a critical vulnerability in the NX-API feature of Cisco NX-OS Software that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges or cause a denial of service condition on an affected device. Cisco has released software updates to address the issue, and there are no workarounds. There are no known instances of active exploitation in the wild.
Why it matters: An attacker can gain root privileges, execute arbitrary code, and cause process crashes leading to a DoS condition.
What to do: Upgrade to a fixed software release as noted in the advisory.
CVEs: CVE-2026-76471
Sompo Japan
Sompo Japan reported a potential leak of customer data due to unauthorized access to a third-party FAQ and inquiry system. Approximately 60,000 inquiries could be affected by this access, which occurred between October 2 and October 3. Sompo Japan’s internal systems were not compromised.
Why it matters: Possible exposure of personal information tied to roughly 60,000 inquiries.
What to do: Affected individuals will be contacted directly and should be cautious of suspicious contacts.
IDCF Cloud
SoftBank’s IDCF Cloud suffered a disruption in its East Japan Region 1 due to a third-party ransomware attack. The disruption impacts 495 corporate and municipal customers.
Why it matters: Service outages and disruptions for 495 enterprise and local government clients.
What to do: Monitor IDCF’s status updates and communicate with support if affected.
Nissui / Nissui Logistics
Nissui Logistics reported shipping disruptions following unauthorized access at a contracted third-party data center. The company is verifying whether data leakage occurred for Nissui / Nissui Logistics.
Why it matters: Operational halt in product shipping and receiving.
What to do: Wait for further updates from Nissui regarding the restoration of logistics systems.
Daiichikosho
Daiichikosho announced a potential data breach affecting approximately 8.72 million customers due to a malware infection at a contractor. Personal data of approximately 8.72 million customers may have been leaked.
Why it matters: Potential leak of personal information for over 8.7 million customers, including names, emails, and phone numbers.
What to do: Customers should remain vigilant against phishing attempts and unauthorized communications.
Sources
Tags: cisco-nx-os-software, sompo-japan, idcf-cloud, nissui, daiichikosho