Vanderbilt University hit in BYOD ransomware attack, data theft claimed

Security news digest covering ransomware and data theft claims against Vanderbilt University, major third-party and cloud data breaches affecting millions, active exploitation of the OpenSSH SSHole vulnerability (CVE-2026-123158), destructive wiper activity, attacks on retail infrastructure attributed to Iranian actors, financial cybercrime, crypto scams, and supply-chain compromises. The most urgent item is active exploitation of the OpenSSH flaw, while the N-able disclosures and attacks on critical or widely used service providers present significant systemic risk.