Vanderbilt University hit in BYOD ransomware attack, data theft claimed

A security news digest covering ransomware and data-theft claims against Vanderbilt University, third-party breaches affecting SEGA and Iris Ohyama customers, alleged vulnerabilities in N-able and OpenSSH, destructive attacks against Beget, state-linked attacks attributed to Iran, major financial fraud, crypto-related crime, and phishing or scam campaigns. The most actionable item is active exploitation of the reported SSHole OpenSSH vulnerability, CVE-2026-123158, while several other reports describe significant operational disruption and large-scale personal-data exposure.