A cyberattack on Change Healthcare, owned by UnitedHealth, has resulted in one of the largest data breaches of US health and medical data in history. The attack, attributed to the ransomware gang ALPHV/BlackCat, reportedly affected over 100 million people. The company was criticized for security failings, including a lack of multi-factor authentication. The attack also resulted in widespread disruption in the healthcare sector.

Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
A suspected Chinese advanced persistent threat (APT) group exploited CVE-2025-22457, a previously unexploitable buffer overflow bug, to compromise devices running Ivanti Connect Secure (ICS) and