The US Office for Civil Rights in the Department of Health and Human Services (HHS) has issued new guidance on patient privacy and data protection in light of the Supreme Court’s recent ruling in Dobbs vs. Jackson Women’s Health Organization. The guidance clarifies the protection of patient health information in relation to reproductive healthcare and reminds providers that they are not required to disclose private medical information to third parties. It also addresses the protection of personal health information on smartphones and tablets and provides suggestions for privacy when using health-information apps. HHS Secretary Xavier Becerra has expressed support for patient privacy protections and has encouraged agencies to safeguard access to abortion and other reproductive health services.

400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered