Oracle Health breached and more - March 30, 2025

Featured

Oracle Health has revealed they were victim of a data breach

In a breach notification to affected customers, Oracle Health said it became aware of a breach of its servers on Feb 20, 2025. The attackers exfiltrated data to a remote server, and sources say it includes patient data. Impacted hospitals are now being extorted for millions of dollars in cryptocurrency.

This Week’s Updates

Security researchers reveal critical vulnerability in Next.js web development framework

Security researchers reveal critical vulnerabilities in Ingress Nginx Controller for Kubernetes

23andMe has filed for bankruptcy

Broadcom has released software updates to address high-severity vulnerabilities in VMware Tools for Windows

CrushFTP has released software updates to address a critical vulnerability in CrushFTP software

Google has released software updates to address a high-severity vulnerability in Chrome that is being actively exploited

StreamElements has revealed they were victim of a data breach

Mozilla has released software updates to Firefox to address a critical vulnerability

Domain for Microsoft Stream was hijacked to display a webpage that acts as phishing

Security researchers reveal campaign targeting npm packages