Breach

Major Australian essential infrastructure services provider Ventia has disconnected some of its key systems to mitigate a cyberattack initially detected on July 8 but reassured the following day that operations have not been disrupted as it deals with the intrusion, according to The Record, a news site by cybersecurity firm Recorded Future.

American-Singaporean multinational gaming hardware firm Razer has confirmed that it began investigating a potentially massive data breach on its systems after being alerted by FalconFeedsio cybersecurity researchers on July 9, BleepingComputer reports.

Two of the bugs allow for unauthenticated access and modification privileges for MOVEit Transfer database content, while the third would allow an attacker to terminate instances of the application at will. A security bulletin from the company lists all three as critical or high severity.

U.S. nonprofit financial services firm for academics Teachers Insurance and Annuity Association of America was confirmed to be compromised in the widespread Cl0p ransomware attack involving the exploitation of a vulnerability in the MOVEit Transfer file transfer software by Connecticut-based Trinity College and Vermont-based Middlebury College, both of which reported data breaches as a result of the ransomware attack against TIAA, TechCrunch reports.

Mobile spyware app LetMeSpy had its collected messages, call logs, and locations exfiltrated and leaked.

The Delaware State Supreme Court upheld an order by a lower court last year to dismiss a shareholder lawsuit against SolarWinds, but legal experts say the impact of the case is likely to be narrow on new legal challenges.