Yale New Haven Health confirmed a cyberattack on its IT systems that may have affected over five million people. The theft included sensitive data such as Social Security numbers but excluded electronic medical records and payment information. Details on the threat actors or stolen data surfacing on the dark web were not reported. The event highlights persistent cybersecurity risks for the healthcare industry with law firms reportedly preparing class-action lawsuits.

400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered