Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents

This week's security digest covers a wide range of incidents, starting with Japanese company Helpfeel confirming that attackers exploited a flaw in its Gyazo screenshot-sharing service to steal roughly 23.62 million user accounts and metadata linked to hundreds of millions of images. Separately, researchers dissected a Windows backdoor dubbed TASK#STOMP, which hunts for business documents on infected machines, exfiltrates them, and lingers to capture newly created or edited files, Wi-Fi credentials, clipboard content and screenshots. Elsewhere, a Chinese-speaking actor has been actively abusing CVE-2026-7273 in unpatched Zyxel GS1900 Smart Managed Switches, compromising almost 1,000 devices across dozens of countries, while Check Point rushed out emergency patches for a Management Server flaw (CVE-2026-93616) that attackers had already been exploiting since July, alongside active probing of a Check Point Security Gateway bug and reported targeting of Spark firewalls and F5 BIG-IP APM. The roundup also notes a brief hijack of Elsevier's domains that redirected visitors to a page branded by the LAPSUS$ group, underscoring how actively threat actors continue to chain fresh vulnerabilities and credential theft against enterprise infrastructure.