Onamae Desktop Cloud, a VPS platform operated by GMO Internet Group, was breached and had malicious software installed on customer environments, affecting up to 26,739 servers. GMO confirmed unauthorized access on October 20 and initiated a progressive shutdown of all Desktop Cloud customer servers starting 04:00 local time on October 21, 2026. The service, commonly used for continuous operations such as automated FX trading with MetaTrader 4, is fully impacted with no estimated restart date while the company investigates.
GMO warns that data stored on the compromised servers may have been exposed and urges customers to immediately rotate passwords and any secrets kept on those machines; payment and credit card information are reportedly segregated on different infrastructure and not affected. No confirmed cases of data misuse or leaks have been reported so far. Customers should anticipate a rise in phishing and social-engineering attempts tied to the incident, and GMO reiterates it will never request passwords or card details by email or phone. The company says it will provide further updates as the investigation continues.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Tech workers in San Francisco face increased risks of espionage, with foreign spies targeting AI companies and employees. Experts warn that romantic or friendly interactions could be attempts at gathering intelligence, making trust difficult in the industry. (sfstandard.com)
Node.js released security updates for CVE-2026-111497, a high-severity flaw in its Brotli decoder that can cause memory leaks or arbitrary code execution. Vercel has deployed WAF rules and is updating managed runtimes; users outside Vercel should upgrade to the latest patched versions immediately. (vercel.com)
Mitmproxy has added a --emudhra option to enhance its functionality. The update involves changes across multiple files, including the changelog and core scripts. (github.com)
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.