Maximum severity vulnerability can lead to server bricking.

This briefing summarizes several high-impact security events: a maximum-severity MegaRAC BMC vulnerability that can brick servers and affects major OEMs and cloud providers; a critical Apache Tomcat RCE (CVE-2025-24813) with a published exploit and observed in-the-wild activity; a critical Veeam Backup & Replication RCE (CVE-2025-23120) with a 9.9 CVSS score and a patch; and two large data breaches—SpyX (~2 million records, including credentials and iCloud data) and the Pennsylvania State Education Association (>500,000 affected) exposing sensitive PII and medical data.