Temu’s EU plan, Overwatch’s card-theft estimate, Park24’s payment plans

Temu agrees to tackle illegal goods under four-month EU deadline

Temu has agreed to tackle illegal sales after a €200 million fine in May. On 26 October, the European Commission said it had accepted the five-measure plan and given Temu four months to conduct an interim risk assessment.

Gheist steals GitHub secrets through job logs, Wiz says

Gheist steals GitHub secrets by changing their text format and printing them in workflow logs, Wiz says. GitHub’s approval safeguard stopped every public-repository run Wiz examined, but does not cover private repositories or Enterprise Server, where Wiz observed completed runs.

uCreator can take over Telegram and WeChat accounts, researcher says

Researcher Ovi found that uCreator can compromise accounts from inside messaging apps. His analysis identifies code that can conceal an attacker’s Telegram login and extract WeChat account data for cloning, but does not establish that attackers used every takeover step from start to finish.

Attackers breach 97 Microsoft 365 accounts, Huntress says

Huntress says attackers compromised 97 Microsoft 365 accounts by reusing stolen sign-in tokens. In at least 19 organisations, attackers replaced authentication methods within three hours, making those settings and registered devices important checks alongside password resets.

UK Biobank says security work is complete after 500,000-person data leak

UK Biobank says security work is complete and an independent cybersecurity assessment recommends reopening its research platform. The charity plans human checks on files before allowing downloads, with an automated process expected in 2027.

Attacker stole details for over 600,000 cards, Overwatch CEO estimates

Overwatch CEO Arjun Bisen estimates that an attacker stole details for more than 600,000 cards, not a count of individual customers. He says the theft occurred as cards were used on compromised payment sites.

Park24 plans 3,000-yen payments after personal data breach

Park24 plans 3,000-yen customer payments after a personal data breach, with compensation and its response to the attack expected to result in a 5.5-billion-yen extraordinary loss. The company also says it will stop keeping identity-document images after registration verification.

GMO Internet pledges compensation after trading-service cyberattack

GMO Internet has pledged compensation and a separate flat payment after its trading-service cyberattack. The company said on 27 October that a suspected attacker had posted material appearing to concern its business and customers; it is checking whether the information is genuine and the full extent of the incident.

Updated

Vercel sets January 2027 security deadline for Marketplace vendors

Vercel’s January 2027 Marketplace deadline targets access keys that can remain valid indefinitely. A 25 October correction clarifies that its token-based deployment guide is for customers, while Vercel said on 23 October that an identity-based replacement was mid-rollout.

Simba faces possible licence cancellation over spectrum allegations

Simba faces potential restrictions on its spectrum rights or operating licence, as well as a fine, under an investigation that previously halted review of its planned M1 takeover. Parent company Tuas says no findings have been made and Simba intends to respond to the notice by the November 16 deadline.

Firebird builds computing infrastructure in Kazakhstan, Nvidia says

Firebird is building its first-phase Kazakhstan computing project, Nvidia says. The expansion builds on its facility in Armenia; a proposed second phase would bring total potential capacity to about 500 megawatts, while the first phase targets commercial launch in the third quarter of 2027.

Apple unveils iPad mini with chip differences tied to storage

Apple unveiled an iPad mini on October 26 whose A20 Pro hardware varies with storage capacity. Apple also specifies extended external-display support with iPadOS 27.2 and charging to up to 50% in 30 minutes with a 35W-or-higher adapter, adding options for working across screens and recharging.