Nearly one million American users of the doctor-patient communication platform ConnectOnCall, owned by health tech firm Phreesia, have had their personal and health records exposed due to a security breach. The compromised data includes full names, health conditions, and Social Security numbers. The breach occurred between February and May 2024, and the company has since taken the product offline and advised users to monitor their accounts for suspicious activity.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,