Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records

Security news covering a major healthcare data breach affecting 9.5 million people, public proof-of-concept zero-day privilege-escalation exploits in Avast and Kaspersky products, actively exploited PaperCut vulnerabilities added to CISA KEV, malware delivery and espionage campaigns, infostealer theft of Claude sessions, and a critical unauthenticated GiveWP WordPress command-execution flaw. The highest-priority items are the KEV-listed PaperCut issues, publicly available endpoint-security exploits, and the GiveWP remote command-execution vulnerability.