The Business Registration Services (BRS) experienced a cyberattack in which sensitive data was stolen and is now publicly available. It’s unknown who instigated the breach that occurred sometime on Friday, January 31. The data, including information about companies in financial distress, is rumored to be sold on the dark web. This is the first significant data violation by a government agency since 2023.
Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries
A critical SQL injection vulnerability (CVE-2025-26794) in Exim affects over 60% of internet mail servers. Authenticated attackers can execute arbitrary SQL commands under specific configurations.
