Advance Auto Parts has revealed that a cyberattack on its Snowflake environment led to personal data of over 2.3 million people being exposed. The intrusion occurred in April and went undetected until May, compromising names, Social Security numbers and other ID details collected during the company’s job application process. The attacker, UNC5537, used stolen credentials from malware infections to gain unauthorized access.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,