Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records

Security news roundup covering a major Aesto Health AWS data breach affecting more than 9.5 million people; publicly released proof-of-concept privilege-escalation exploits for GenDigital Avast Antivirus and Kaspersky Endpoint Security; CISA adding actively exploited PaperCut NG/MF vulnerabilities to its KEV catalog; a critical unauthenticated GiveWP WordPress flaw enabling server command execution; DPRK-linked workers infiltrating Western companies; ATM jackpotting; ValleyRAT malware using DLL sideloading; China-linked Fire Ant compromising Cisco routers and hiding activity; and infostealers’