Railway breach leads to $740,000 in fraudulent AI charges

A BleepingComputer security-news feed reports multiple significant cyber incidents and vulnerabilities, including cloud credential compromise and data exfiltration, large-scale customer-record exposure, actively exploited zero-days, critical authentication bypasses, root-level exploitation of Barracuda ESG devices, ransomware, and espionage targeting government Exchange servers. The most urgent items involve vulnerabilities being actively exploited in the wild, though the document is an aggregated feed and does not provide CVE identifiers for the reported issues.