Synnovis, an NHS partnered pathology provider, was subject to a ransomware attack by the Qilin gang, impacting 900,000 patients and disrupting operations at multiple London hospitals in June 2024. Hackers published patients’ personal and sensitive medical information online. Synnovis has secured a preliminary injunction from the English High Court preventing further publication of the stolen data.

Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
A suspected Chinese advanced persistent threat (APT) group exploited CVE-2025-22457, a previously unexploitable buffer overflow bug, to compromise devices running Ivanti Connect Secure (ICS) and