A 57-year-old woman from Inchture, Perthshire, has been the victim of a third data breach by NHS Tayside, finding that her personal details were accidentally sent to another patient. Previously, a Ninewells Hospital worker had viewed her medical records without permission. Amanda Flood received an apology from NHS Tayside, who have reported the incident to the Information Commissioner’s Office but no further action was taken.
Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries
A critical SQL injection vulnerability (CVE-2025-26794) in Exim affects over 60% of internet mail servers. Authenticated attackers can execute arbitrary SQL commands under specific configurations.
