Three intrusions at UK criminal records office went undetected for two years

The feed reports multiple significant cybersecurity developments, including three undetected breaches at the UK criminal-records office ACRO attributed to unread antivirus alerts and an unpatched CMS; a major Microsoft Patch Tuesday release; active exploitation of a Microsoft vulnerability by North Korean actors targeting job application processes; and a ransomware attack against a hospital involving alleged theft of highly sensitive health data and takeover of its Facebook page. No specific CVE identifiers are provided in the supplied metadata.