President Trump fires the head of NSA and Cyber Command.

A security news roundup reports several active and high-impact issues: Oracle Health (formerly Cerner) notified customers of a breach exposing patient records; a critical CrushFTP authentication-bypass vulnerability (CVE-2025-31161 / CVE-2025-2825) is being exploited in the wild with a public PoC and ~1,500 vulnerable instances; Apache Parquet and major browsers received patches for high-severity RCE and memory-safety flaws; North Korean fraudulent IT worker operations are expanding into Europe to generate revenue for the regime; and the FTC is requiring any buyer of 23andMe to honor prior privacy commitments.