CANADIAN GUILTY IN SNOWFLAKE DATA THEFT SCHEME
■ AI-SUMMARIZED FROM 4 SOURCES ▸ TIMELINE
A Canadian man pleaded guilty to breaching Snowflake cloud accounts and stealing data from at least 165 organizations in an extortion operation. The attack exposed sensitive information across multiple sectors.
■ SOURCES
► Bleeping Computer► Techmeme► Krebs on Security► TechCrunch■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE
■ MORE FROM THE SECURITY DESK
A former NSA official has warned against connecting water infrastructure controllers to the internet following suspected Iranian cyberattacks on U.S. water systems.
Security researchers scanning Polish government websites discovered critical vulnerabilities that could expose courts, hospitals, and airports to cyberattacks. The vulnerabilities stem from common software used to manage and display web content.
A critical SQL injection vulnerability in Metabase is being actively exploited in the wild to steal customer data. The zero-day attack has already compromised instances at Framework and Tally.
Healthcare software company Unlimited Technology Systems disclosed a data breach affecting 3.8 million individuals. The breach occurred in October 2025.