Rapid7 reveals a critical PostgreSQL SQL injection flaw (CVE-2025-1094) with a CVSS score of 8.1 exploited by the same threat actors behind the December 2024 BeyondTrust zero-day attacks, underscoring pressing cybersecurity challenges.