UnitedHealth Group Inc experienced the largest healthcare data breach in U.S. history which compromised the personal data of 190 million Americans. The breach led to widespread disruption, delayed payments to providers and sparked a Congressional inquiry. UnitedHealth has paid over $3.3 billion in advance payments to affected healthcare providers and admitted to paying a ransom to the cyberattackers.

Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
A suspected Chinese advanced persistent threat (APT) group exploited CVE-2025-22457, a previously unexploitable buffer overflow bug, to compromise devices running Ivanti Connect Secure (ICS) and