Your Forgotten SQL Server Just Landed on CISA’s Emergency List
CISA has added a seven-year-old Microsoft SQL Server vulnerability to its exploited list, turning forgotten database instances into an urgent incident-response problem.
News
Your Virtual Machine Can Escape: VMware Just Patched Two Host-Takeover Flaws
Two VMware Workstation and Fusion flaws can let an administrator inside a virtual machine execute code on the host. Versions 25H2 and 26H1 need 26H1u1.
One Healthcare Archive Was Breached. 9.5 Million Patients Paid the Price.
A breach at Aesto Health reached 9.5 million people across at least two dozen providers, exposing medical, financial and identity data stored in AWS.
One WhatsApp Video Call Could Expose Every Photo on Your Locked Android
On some Android phones, a person holding the locked device can answer a WhatsApp video call, open Meta AI's editor and browse the photo gallery without a PIN or biometric check.
Nutex Knows Data Left the Network. It Still Cannot Say Whose Data Was Taken.
Nutex Health has confirmed that an unauthorised party accessed its network and exfiltrated information from company servers. The healthcare operator knows that data left the environment. It does not yet know, or has not publicly disclosed, whether the stolen material…
A DDoS Against One Provider Reached Norway’s Digital Government.
A distributed denial-of-service attack against infrastructure operated by Digdir’s supplier Vivicta disrupted access to shared digital services used across Norway’s public sector. The incident affected ID-porten and a chain of dependent services, showing how an availability attack against one provider…
The Vulnerability Backlog Doubled. The Exploited Set Didn’t. ‘Patch Faster’ Is the Wrong Answer.
Rapid7 counted twice as many high and critical disclosures, while newly exploited vulnerabilities stayed near 40. The queue is not the risk model.
The Doors Stayed Open. The Organisation Behind Them Was Running on Emergency IT.
Brandenburg’s seven memorial sites remained open after ransomware disabled central IT. The real resilience story was the emergency operation behind the public doors.
The Load Balancer Was Supposed to Distribute Traffic. Attackers Used It to Run Commands.
A critical LoadMaster command-injection flaw is being exploited. Because the appliance controls traffic at the edge, defenders should patch quickly and investigate what the device could reach or expose.
They Did Not Steal Passwords. They Stole the Map of Who to Attack Next.
Alleged Entra directory theft exposed organisational maps rather than passwords. Treat bulk directory reads as a high-impact identity event.