For individuals

Numerous class action lawsuits have been filed against major U.S. biotechnology and genetic testing firm 23andMe following a massive data breach stemming from credential stuffing attacks that compromised information from almost 1 million Ashkenazi Jews, BleepingComputer reports.

Over 800 stores of U.S. convenience store chain Kwik Trip had their services disrupted by a "network incident" during the past week, reports The Record, a news site by cybersecurity firm Recorded Future.

TechCrunch reports that French cloud gaming service Shadow may have downplayed the data breach it confirmed to have stemmed from an "advanced social engineering attack," which CEO Eric Sele said resulted in the compromise of customers' full names, birthdates, billing and email addresses, and credit card expiry dates.

Attacks with an updated and simplified RomCom RAT variant dubbed PEAPOD have been launched by the Void Rabisu threat operation, also known as Storm-0978, UNC2596, and Tropical Scorpius, against female political leaders who participated in the Women Political Leaders Summit in June, according to The Hacker News.

BleepingComputer reports that malicious scripts for compromising WordPress sites have been concealed in the blockchain by the ClearFake threat operation using the new EtherHiding code distribution technique that leverages the Binance Smart Chain in a bid to better evade detection.

Major U.S. pipeline system Colonial Pipeline has denied having its systems or operations affected by a ransomware attack claimed by the RansomedVC operation, saying that stolen files exposed by the ransomware group were from an unrelated third-party data breach, according to The Record, a news site by cybersecurity firm Recorded Future.

Separate distributed denial-of-service attacks have impacted two humanitarian nonprofit organizations conducting relief operations in Israel and Gaza amid the ongoing Israel-Hamas conflict, Reuters reports.

A spoofed version of the popular RedAlert app collects sensitive user data on Israeli citizens, including contacts, call logs, SMS account details, and more.

No patch or workaround is currently available for the maximum severity flaw, which allows attackers to gain complete administrator privilege on affected devices remotely and without authentication.