DeepSeek, a Chinese AI firm, has exposed a database, revealing chat history and operational details due to weak security measures. Other cybersecurity incidents include hackers exploiting vulnerabilities in Zyxel devices and PowerSchool beginning to send notices out over a past data breach. Apple has patched a zero-day vulnerability whilst hackers exploited XWorm RAT. Credit Control Corporation has settled a lawsuit over a 2023 breach with a $1.61m payment.
Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries
A critical SQL injection vulnerability (CVE-2025-26794) in Exim affects over 60% of internet mail servers. Authenticated attackers can execute arbitrary SQL commands under specific configurations.
