[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feSEoM7u551TsDbOzX4CYiTtcH_3TXtcsc6n60wHoRKI":3},{"article":4,"iocs":52,"watch_terms":56,"solutions":57,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ac5d499c-049e-4328-bce4-1a1628c9d1fa","Nikkei discloses breaches of employees’ Microsoft, Google email accounts","nikkei-discloses-breaches-of-employees-microsoft-google-email-accounts-8a0721","Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. [...]","Japanese publishing giant Nikkei disclosed that two employee email accounts were breached by unknown attackers. One Google Workspace account accessed in late July exposed employee and partner data, while a Microsoft 365 account accessed in September was used to send 9,000 phishing emails to Nikkei staff and interviewees. The company has changed passwords and is contacting affected individuals.","Nikkei reports two employee email accounts breached, one used for phishing.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnikkei-discloses-breaches-of-employees-microsoft-google-email-accounts\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F06\u002FNikkei.jpg","2026-10-06T09:25:50+00:00","2026-10-06T10:00:24.107636+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"Google","vendor",{"name":21,"type":22},"Google Workspace","product",{"name":24,"type":19},"Microsoft",{"name":26,"type":22},"Microsoft 365",{"name":28,"type":22},"Slack","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,40,42,47],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[53],{"type":46,"value":54,"context":55},"phishing emails","Sent from compromised Microsoft 365 account",[18,24,21],{"controls":58,"vendors":145},[59,88,116],{"slug":60,"name":61,"problem":62,"products":63},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":89,"name":90,"problem":91,"products":92},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[93,101,108],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":102,"vendor_name":24,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"slug":117,"name":118,"problem":119,"products":120},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",[],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":163},"nikkei-employee-email-accounts-hijacked-used-to-launch-internal-phishing-campaign","Nikkei Employee Email Accounts Hijacked, Used to Launch Internal Phishing Campaign","Two Nikkei employee accounts — one Google Workspace and one Microsoft 365 — were compromised by unknown attackers, exposing partner data and enabling a large-scale internal phishing campaign that reached 9,000 recipients. The core failure lies in insufficient access controls, most likely the absence of multi-factor authentication (MFA) on corporate email accounts. Once inside, attackers leveraged the trusted identity of the compromised accounts to pivot and target more victims, a classic credential abuse pattern. This incident highlights how a single weak account can become a launchpad for broader organizational harm, and why reactive measures like password resets alone are insufficient without systemic hardening.",[151,152,153,154,155,156,157,158,159,160,161,162],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 9 – Email and Web Browser Protections","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 IA-5 (Authenticator Management \u002F MFA)","NIST SP 800-53 SI-8 (Spam Protection)","NIST Cybersecurity Framework PR.AC-1, DE.CM-1","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of Personal Data Breach","ITIL – Information Security Management (Service Management Practice)","ISO\u002FIEC 27001 – A.9 Access Control, A.16 Incident Management",{}]