Threat actors have exploited 159 CVEs during the first three months of 2025, compared with 151 during the last quarter of 2024, with almost a third of vulnerabilities leveraged in attacks within a day of their disclosure, according to The Hacker News.
Widely used workplace time tracking and productivity monitoring software WorkComposer had over 21 million screenshots of employee devices unintentionally leaked by an unprotected Amazon S3 bucket, Cybernews reports.
Major health insurance provider Blue Shield of California has disclosed having sensitive data from 4.7 million individuals inadvertently shared with Google Ads for nearly three years, according to The Record, a news site by cybersecurity firm Recorded Future.
