A critical security vulnerability (CVE-2025-34028) in Commvault Command Center version 11.38 allows unauthenticated attackers to execute arbitrary code remotely, with a high CVSS score of 9.0. Affected systems should update to version 11.38.20 or 11.38.25, released on April 10, 2025, to mitigate risks. Immediate isolation from external access is recommended if updates cannot be applied.
Sleep study patients’ personal data accessed in ransomware attack, SA Health says
Over 2,000 patient files from Adelaide’s Women’s and Children’s Hospital were accessed during a ransomware attack targeting third-party company Compumedics. The company, which supplies sleep