Te Whatu Ora Health New Zealand revealed a five-month-old IT breach, where hackers accessed sensitive staff data, including medical assessments from 2020 to 2024. While there’s no evidence of data sharing online, the organization has not yet notified affected individuals. The Privacy Commissioner and NZ Police are involved, planning to charge the suspected hacker. Concerns arise as Te Whatu Ora downsizes, potentially increasing IT risks.

PipeMagic Trojan Exploits Windows CLFS Zero-Day Vulnerability to Deploy Ransomware
Microsoft reported a now-patched security flaw, CVE-2025-29824, in Windows’ Common Log File System that was exploited in select ransomware attacks against IT and real estate