Diamondbacks OF Corbin Carroll heading to IL due to left wrist fracture after being hit by pitch against Blue Jays

Arizona Diamondbacks outfielder Corbin Carroll is heading to the injured list due to a chip fracture in his left wrist.

Carroll suffered the injury last week when he was hit in the hand during a game against the Toronto Blue Jays. He left the game after the top of the eighth inning, and postgame X-rays were negative.

Diamondbacks manager Torey Lovullo said Monday night that Carroll, who hasn’t played since the hit-by-pitch, is seeking other opinions to get a definitive diagnosis and determine how much time he will miss.

“That’s a little bit confusing to all of us,” Lovullo said of Carroll’s chip fracture. “It’s on the back of his hand. The impact of the ball hit the side of his hand. Just goes to show you how hard these guys are throwing today. Definitely that fracture in there.”

“You try and play and get treatment, and hopefully it feels better after a day or two,” said Carroll, the 2023 NL Rookie of the Year. “As it didn’t, it became apparent that maybe a few more tests were needed. Got those done. It’s just unfortunate.”

Through 72 games this season, the 24-year-old Carroll is batting .255 with 20 home runs, 44 RBI and 10 stolen bases.

“It sounds like it’s relatively stable, so it just needs to heal, and we’ll see how it is to tolerate after that,” Hazen said of Carroll’s next steps. “I don’t know what the downtime is going to be. They’ll probably reassess it after a few weeks. It’s going to be some period of time down.”

On Friday, the Diamondbacks placed catcher Gabriel Moreno on the IL due to a hairline fracture in his hand after it was originally believed to be a contusion. In another injury blow, reliever A.J. Puk underwent surgery on his left elbow and will miss the rest of the season.

NBA free agency 2025: Latest news, rumors, trades ahead of NBA Draft as Celtics reportedly trade Kristaps Porzingis to Hawks in 3-team trade

The Oklahoma City Thunder just won the NBA championship, but the other 29 teams don’t have time to celebrate. The NBA offseason is already in full swing, with two significant trades already taking place ahead of the 2025 NBA Draft

NBA free agency officially begins at 6 p.m. ET on Monday, June 30, when teams are allowed to start negotiating with free agents. Players can sign contracts beginning on July 6.

Kevin Durant and Jrue Holiday may find themselves with new teams, but they won’t be the only players wearing new jerseys next season. Here are the latest moves, rumors and trades ahead of the 2025 NBA Draft.

June 24: Celtics reportedly finalizing deal to send Kristaps Porzingis to Hawks in 3-team trade involving Nets

The Boston Celtics are finalizing a three-team deal with the Atlanta Hawks and Brooklyn Nets that sends Kristaps Porzingis to the Hawks, ESPN’s Shams Charania reports.

Per the report, the Celtics are sending Porzingis and a second-round draft pick to Atlanta. The Hawks are sending Terance Mann and the No. 22 pick in Wednesday’s NBA draft to the Nets. Atlanta will also send Georges Niang and a second-round selection to the Celtics.

The move is the second trade in two days for the Celtics after they dealt Jrue Holiday to the Portland Trail Blazers in exchange for a package that features Anfernee Simons and future second-round draft picks.

The trades by the Celtics are part of an effort to move salaries below the NBA’s punitive second tax apron of $207,825,000. Boston is parting with core members of its 2024 championship team to do so. Like Holiday, Porzingis was a key contributor on that championship team that secured the franchise’s first NBA title since 2008.

June 24: Pelicans reportedly trading CJ McCollum, Kelly Olynyk to Wizards for package including Jordan Poole

The New Orleans Pelicans are trading CJ McCollum and Kelly Olynyk to Washington Wizards for a package that includes Jordan Poole, ESPN’s Shams Charania reports.

Per the report, the Pelicans are also sending a future second-round pick to Washington. In addition to Poole, the Wizards are sending the Pelicans Saddiq Bey and the No. 40 pick in Wednesday’s NBA Draft. The deal signals a further roster overhaul of the Pelicans core after New Orleans traded Brandon Ingram to the Toronto Raptors during the season.

McCollum, 33, was a three-plus-year starter for the Pelicans after arriving via trade from the Portland Trail Blazers during the 2021-22 season. McCollum was previously Damian Lillard’s backcourt running mate in Portland.

June 24: Matisse Thybulle picks up option, returns to Trailblazers

Matisse Thybulle is staying in Portland as he picked up his $11.5 million player option for the 2025-26 season, ESPN’s Shams Charania reported on Tuesday. 

The 28-year-old was traded to Portland from the Philadelphia 76ers during the 2022-2023 season as part of a four-team trade that also involved the New York Knicks and Charlotte Hornets. Thybulle signed a $33 million deal for three years the following offseason. 

Thybulle’s option comes after he played 15 games this past season and averaged 7.5 points, 3.5 rebounds and 2.2 steals as the Blazers finished with a 36-46 record.

June 24: Knicks reportedly interviewing Timberwolves coach Micah Nori

The New York Knicks found another candidate for their head-coaching position. Minnesota Timberwolves assistant Micah Nori will reportedly interview for the role. Nori is a long-time assistant around the league, and has served in that role with the Toronto Raptors, San Antonio Spurs, Denver Nuggets and Detroit Pistons before joining the Timberwolves.

Nori is the third person the Knicks have interviewed for the role. Mike Brown and Taylor Jenkins each had formal interviews with the team. Of that trio, Nori is the only one without head-coaching experience. 

June 23: Celtics reportedly trading Jrue Holiday to Trail Blazers for Anfernee Simons, draft picks

The Trail Blazers struck a deal with the Boston Celtics on Monday night to acquire Holiday, according to ESPN’s Shams Charania. In exchange, Portland is sending guard Anfernee Simons and a pair of future second-round draft picks to Boston. 

The deal, according to Charania, is only the beginning for the Celtics this offseason. The team is still engaged in trade talks “surrounding multiple key players on the roster,” though further specifics are not yet known. Boston has significant work to do to avoid the luxury tax altogether, and it’s likely that Holiday is simply the first player to go.

June 23: Khris Middleton reportedly picks up $33.3 million option to remain with Wizards next season

Middleton picked up his $33.3 million player option for the 2025-26 campaign on Monday, according to ESPN’s Shams Charania. That is part of the initial three-year, $93 million deal he signed with the Milwaukee Bucks in 2023.

The Bucks dealt Middleton to the Wizards ahead of the deadline last season in a move that sent Kyle Kuzma to Milwaukee. Middleton ended up playing in just 14 games for the Wizards, who went 18-64 and missed the playoffs for a fourth consecutive year, while dealing with a knee injury. In total, Middleton averaged 11.9 points and 3.7 rebounds per game last season, his lowest numbers since his rookie campaign.

June 22: Suns trade Kevin Durant to Houston Rockets for Jalen Green, Dillon Brooks, draft picks

The Phoenix Suns traded Durant to the Houston Rockets, in exchange for Green and Brooks. Phoenix also received the No. 10 pick in the 2025 NBA Draft and five second-round picks as part of the trade.

The deal will not officially go through until July 6, per ESPN’s Bobby Marks, due to a restriction in Green’s rookie extension, which he signed last October. The second-round picks in the trade will stretch to 2032, per NBA insider Jake Fischer.

Durant will join an emerging Rockets team that is anchored by rising stars Amen Thompson and Alperen Şengün, as starters Green and Brooks are sent to Phoenix. The Rockets made the playoffs this season for the first time since 2020 as the No. 2 seed in the West. They lost in the first round to the Golden State Warriors.

June 21: Pat Connaughton picks up option, returns to Bucks

Pat Connaughton is comfortable in Milwaukee. The veteran guard reportedly picked up his player option to return to the team, ESPN’s Shams Charania reported Saturday. 

Connaughton had until Tuesday to make a decision on his $9.4 million option. The 32-year-old averaged 5.3 points and 2.7 rebounds with the team last season.

After starting his career with the Portland Trail Blazers, Connaughton has spent the past seven seasons in Milwaukee. He’s mostly served in a backup role with the team, though is occasionally pushing into a starting spot. After averaging 22.3 minutes per game in his first six seasons with the Bucks, Connaughton saw that number drop to 14.7 minutes per game last season.

With Connaughton on board, the Bucks project to sit below the first apron. The team should still be “able to sign a player to the $14.1 million midlevel exception,” per ESPN.

ControlID iDSecure On-Premises

View CSAF

1. EXECUTIVE SUMMARY

  • CVSS v4 9.3
  • ATTENTION: Exploitable remotely/low attack complexity
  • Vendor: ControlID
  • Equipment: iDSecure On-premises
  • Vulnerabilities: Improper Authentication, Server-Side Request Forgery (SSRF), SQL Injection

2. RISK EVALUATION

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, retrieve information, leak arbitrary data, or perform SQL injections.

3. TECHNICAL DETAILS

3.1 AFFECTED PRODUCTS

The following versions of ControlID iDSecure On-premises, a vehicle control software, are affected:

  • iDSecure On-premises: Versions 4.7.48.0 and prior

3.2 VULNERABILITY OVERVIEW

3.2.1 IMPROPER AUTHENTICATION CWE-287

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an Improper Authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.

CVE-2025-49851 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

A CVSS v4 score has also been calculated for CVE-2025-49851. A base score of 8.7 has been calculated; the CVSS vector string is (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N).

3.2.2 SERVER-SIDE REQUEST FORGERY (SSRF) CWE-918

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a Server-Side Request Forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers.

CVE-2025-49852 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

A CVSS v4 score has also been calculated for CVE-2025-49852. A base score of 8.7 has been calculated; the CVSS vector string is (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N).

3.2.3 IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND (‘SQL INJECTION’) CWE-89

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries.

CVE-2025-49853 has been assigned to this vulnerability. A CVSS v3.1 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

A CVSS v4 score has also been calculated for CVE-2025-49853. A base score of 9.3 has been calculated; the CVSS vector string is (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N).

3.3 BACKGROUND

  • CRITICAL INFRASTRUCTURE SECTORS: Commercial Facilities
  • COUNTRIES/AREAS DEPLOYED: Worldwide
  • COMPANY HEADQUARTERS LOCATION: Brazil

3.4 RESEARCHER

Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA.

4. MITIGATIONS

ControlID has released the following versions for users to update:

For more information, contact ControlID.

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:

  • Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
  • Locate control system networks and remote devices behind firewalls and isolating them from business networks.
  • When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

CISA also recommends users take the following measures to protect themselves from social engineering attacks:

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

5. UPDATE HISTORY

  • June 24, 2025: Initial Publication

Delta Electronics CNCSoft

View CSAF

1. EXECUTIVE SUMMARY

  • CVSS v4 7.3
  • ATTENTION: Low attack complexity
  • Vendor: Delta Electronics
  • Equipment: CNCSoft
  • Vulnerabilities: Out-of-bounds Write

2. RISK EVALUATION

Successful exploitation of these vulnerabilities could allow an attacker to execute code within the context of the current process.

3. TECHNICAL DETAILS

3.1 AFFECTED PRODUCTS

Delta Electronics reports the following versions of CNCSoft, a human-machine interface, are affected:

  • CNCSoft: v1.01.34 and prior

3.2 VULNERABILITY OVERVIEW

3.2.1 OUT-OF-BOUNDS WRITE CWE-787

Delta Electronics CNCSoft does not properly validate user-supplied files. If a user opens a maliciously crafted file, an attacker can leverage this vulnerability to execute code within the context of the current process.

CVE-2025-47724 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.7 has been calculated; the CVSS vector string is (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).

A CVSS v4 score has also been calculated for CVE-2025-47724. A base score of 7.3 has been calculated; the CVSS vector string is (CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H).

3.2.2 OUT-OF-BOUNDS WRITE CWE-787

Delta Electronics CNCSoft does not properly validate user-supplied files. If a user opens a maliciously crafted file, an attacker can leverage this vulnerability to execute code within the context of the current process.

CVE-2025-47725 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.7 has been calculated; the CVSS vector string is (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).

A CVSS v4 score has also been calculated for CVE-2025-47725. A base score of 7.3 has been calculated; the CVSS vector string is (CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H).

3.2.3 OUT-OF-BOUNDS WRITE CWE-787

Delta Electronics CNCSoft does not properly validate user-supplied files. If a user opens a maliciously crafted file, an attacker can leverage this vulnerability to execute code within the context of the current process.

CVE-2025-47726 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.7 has been calculated; the CVSS vector string is (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).

A CVSS v4 score has also been calculated for CVE-2025-47726. A base score of 7.3 has been calculated; the CVSS vector string is (CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H).

3.2.4 OUT-OF-BOUNDS WRITE CWE-787

Delta Electronics CNCSoft does not properly validate user-supplied files. If a user opens a maliciously crafted file, an attacker can leverage this vulnerability to execute code within the context of the current process.

CVE-2025-47727 has been assigned to this vulnerability. A CVSS v3.1 base score of 7.7 has been calculated; the CVSS vector string is (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).

A CVSS v4 score has also been calculated for CVE-2025-47727. A base score of 7.3 has been calculated; the CVSS vector string is (CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H).

3.3 BACKGROUND

  • CRITICAL INFRASTRUCTURE SECTORS: Critical Manufacturing, Energy
  • COUNTRIES/AREAS DEPLOYED: Worldwide
  • COMPANY HEADQUARTERS LOCATION: Taiwan

3.4 RESEARCHER

Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.

4. MITIGATIONS

Delta Electronics does not plan to address these vulnerabilities because the A-series CNC products supported by CNCSoft have been discontinued. CNCSoft will be removed from the Delta Download Center. Delta recommends users migrate to newer Delta CNC products along with their corresponding software as soon as possible.

Delta Electronics offers the following general recommendations:

  • Do not click on untrusted Internet links or open unsolicited email attachments.
  • Avoid exposing control systems and equipment to the Internet.
  • Place systems and devices behind a firewall and isolate them from the business network.
  • When remote access is required, use a secure access method, such as a virtual private network (VPN).

For any product-related support inquiries, contact Delta through the company’s portal page to request any information or materials you may need.

Reference Delta’s product cybersecurity advisory for more information about these vulnerabilities.

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.

Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

CISA also recommends users take the following measures to protect themselves from social engineering attacks:

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.

5. UPDATE HISTORY

  • June 24, 2025: Initial Publication

Warriors offseason outlook: Can they maximize Stephen Curry’s competitive window?

Unlike with Boston and Cleveland, the second-round demise of the Warriors wasn’t that big of a surprise. Yes, Stephen Curry’s hamstring injury was a bitter blow, but you might say Golden State went exactly as far as their talent allowed it to.

For a while now, the Warriors have found themselves in an odd place. After winning the title three years ago, age, roster alterations and unfulfilled expectations have created a product that comes with a fairly set ceiling, despite the continued excellence of Curry when healthy.

This season, in particular, was filled with major change.

Klay Thompson left for Dallas last summer, and Jimmy Butler was acquired before the trade deadline.

It also appears Jonathan Kuminga might not be long for this roster, especially after the Butler deal.

Yet, that trade did signal a willingness from ownership to give Curry some help over the course of his final years. The organization might not have championship upside, but it can make enough noise to get into the playoffs and perhaps reach the Western Conference finals with some tweaks and if everything breaks right.

The Warriors were out of answers without Stephen Curry as their season ended Wednesday in Game 5 of the second round against the Timberwolves in Minneapolis. (AP Photo/Abbie Parr)
ASSOCIATED PRESS

That’s fairly solid, all things considered.

Of course, as the Warriors head into the offseason you have to wonder if they — internally — are fine with “solid,” or if they have loftier goals. If Golden State wants more, this has to be another summer of change.

Kuminga, who will be a restricted free agent, doesn’t have an obvious market. For one, only the Brooklyn Nets have oodles of cap space, and secondly, it’s still not clear what type of player he is after four seasons in the league.

The Butler trade signaled a willingness to lean further into a veteran identity.

With Brandin Podziemski and Moses Moody both capable of playing off Curry, Butler and Draymond Green, those two seem like good bets to stick around.

Summer will reveal what they’re thinking and how they plan to move forward, but it would surprise no one if the Warriors continue to try to maximize Curry’s competitive window.


Record: 48-34, seventh in the Western Conference. Lost to the Minnesota Timberwolves in five games in the second round.


Buddy Hield’s 33-point Game 7 performance against the Houston Rockets in the first round was epic and showed the veteran in just the right light. Hield, notorious for making odd decisions late in games, leaned into the role of zone-busting sniper, cashing in nine triples and acting as a major release valve. In his very next game, he failed to put on the right shorts and delayed Game 1 against the Wolves. Don’t ever change, Buddy.


Stephen Curry
Jimmy Butler
Draymond Green
Moses Moody
Buddy Hield
Brandin Podziemski


Jonathan Kuminga (RFA)
Gary Payton II (UFA)
Kevon Looney (UFA)
Trayce Jackson-Davis (non-guaranteed)
Quinten Post (team option)


$164,107,671


No. 41

Draft focus: At this range, nothing will make a huge difference. However, adding shooting wouldn’t be the worst idea.


Technically, the Warriors could have the Non-Tax MLE at their disposal, however, that depends on what happens with Kuminga. If he’s back in the fold on a hefty price tag, or if the team has conducted a sign-and-trade in which they take back salary similar to his new deal, then things get a little more complicated.


Needless to say, this team wants to be competitive, even if it’s older and slower than its 2022 title team. It’d be odd if the Warriors didn’t approach this summer as buyers in order to further strengthen the roster moving forward. However, they have to be realistic about not only what they can afford, but what type of talent they can absorb. Adding more shooting to a team that features both Butler and Green would probably be a good idea.

2025 NBA Draft scouting report: Koby Brea, G, Kentucky

(Yahoo Sports/Getty Images)

For a two-round mock draft and a big board with full scouting reports, check out my NBA Draft Guide.


Height: 6-6 • Weight: 202 • Class: Senior • Age: 22

Summary: Brea projects as a shooting specialist who has a clear path to becoming a rotation player because of his highly sought after skill. But in order to avoid being a weak link on defense, he’ll need to make improvements to his athleticism.

Comparisons: Sam Hauser

Shooting: Lethal shooter who made 43.4% of his 3s on a high volume of 4.9 per game over five college seasons. He has NBA range with a quick release, plus the footwork to shoot off movement actions.

Passing: In no way is he a primary creator, but he has an intelligent floor game. He keeps the ball moving and can make some confident bounce passes through traffic, so there’s some flare to him, too.

Size: At 6-foot-7, if he keeps getting stronger and maximizes his athleticism, he could become a non-target on the defensive end.

Athleticism: Unless he has a lot of space, he’s a below-the-rim player. He made only 43.8% of his layups in the half court, per Synergy. He also lacks a quick first step or burst off the dribble, which limits him when attacking closeouts to only basic pull-ups.

Defense: He lacks quickness moving laterally, doesn’t generate many steals and blocks, and has quite a lean frame despite his age.

For a two-round mock draft and a big board with full scouting reports, check out my NBA Draft Guide.