A reported zero-day in an external system opened a path into a KDDI email environment, with the impact figure placing the incident far above an ordinary mailbox problem.
A shared ISP email platform became the pressure point in a reported cyberattack, showing how one software flaw can turn routine mailbox infrastructure into a large-scale identity risk.
KDDI’s disclosure points to a multi-tenant email platform incident, where one backend risk may have put millions of ISP logins into the same danger zone.