InfoSecBulletin Cybersecurity for mankind
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked by a contracted outsourcing firm. In response, the company intends to end its contract with the provider and will collaborate with the police to assess future actions.
SoftBank announced that 137,156 personal information records, including names, addresses, and phone numbers of SoftBank and Y! Mobile users, may have been leaked from an outsourced company called “UF Japan.”
AMD discloses 4 new CPU flaws Affecting Many CPUs
GitLab patched XSS and Authorization Bypass Flaws
CVE-2025-7206
Critical D-Link DIR-825 Router Flaw Remote Crash Via Buffer Overflow
Urgently patch now: Zoom Patches 6 Flaws
Whatsapp rival ‘Bitchat’, message without internet
Splunk Addresses Third-Party Package Vulns in SOAR Versions
Texas-based Tax Credit Consultancy agency exposed PII, ID Numbers, & SSNs
CVE-2025-25257
Fortinet Addresses Major SQL Injection Flaw in FortiWeb
Microsoft July 2025 Patch Tuesday: One zero-day, 137 flaws
Android malware Anatsa infiltrates Google Play targeting banks worldwide
Credit card and account numbers remained safe. The incident was uncovered after the company investigated a third-party report in March.
The management of entry and exit protocols on the floors housing personal data was poorly handled by the outsourced company, resulting in a potential violation last December when a previous employee from a partner organization may have illegally entered the site and taken personal information.
In addition, the personal information was made accessible to people unrelated to the company’s work.
NHK reported, The company has terminated its contract with the outsourced company and is consulting with the police to consider future responses.
SoftBank commented, “We take the serious incident seriously, and will strengthen management of outsourced companies that handle personal information to prevent recurrence.”
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
