Hackers exploited a zero-day vulnerability, Microsoft CVE-2025-29824, to target real estate and IT firms in the US, financial companies in Venezuela, a Spanish software firm and retail firms in Saudi Arabia. PipeMagic malware was used in the attacks, leading to ransomware deployments. Microsoft researchers have highlighted the capability of the vulnerability to elevate an attacker’s privileges and access within compromised systems. A patch has been released, but not for Windows 10 32-bit or 64-bit systems.

Baltimore and New York archdiocese abuse survivors possibly exposed in cyber incident – CBS News
Survivors of abuse within the Baltimore and New York archdioceses may have had their personal information compromised in a recent cyber incident. The breach raises