Stalkerware firm gets scooped by SQL-slinging security snoop

Infosec In Brief summarizes several active security incidents: a security researcher exploited an SQL injection in the Catwatchful stalkerware backend to obtain ~62,000 plaintext user accounts and identify its alleged administrator; Google patched an actively exploited Chrome V8 zero-day (CVE-2025-6554); the Play ransomware gang hit a Swiss government partner (Radix); Esse Health disclosed a breach affecting ~263,601 individuals; researchers also showed IDE extension verification can be spoofed and the CVE Program is undergoing governance scrutiny.