Praetorian cybersecurity researchers have found a vulnerability in open-source machine learning platform TensorFlow that could allow an attacker to compromise its software supply chain. The flaw is due to CI/CD misconfigurations and could lead to a supply chain attack on TensorFlow releases by compromising TensorFlow’s build agents through a malicious pull request. The researchers reported the vulnerability to Google, who acknowledged it as a critical supply chain compromise vulnerability.

Seema Verma is ‘excited about progress’ of Oracle’s EHR modernization at VA
Seema Verma from Oracle Health updated on the VA’s Electronic Health Records Modernization at HIMSS25, highlighting increased patient satisfaction and ongoing challenges, including recent outages.