Risk Assessments/Management

Atlassian has issued fixes for a critical flaw in its Jira software, which threat actors could exploit to evade authentication protections.

A settlement has been reached in the class action data breach lawsuit against Solara Medical Supplies, over a months-long, undetected email systems hack, requiring a long list of security requirements.

Despite a surge in cybercrime, Visa reported record-lows in cyber fraud as the company has invested in security innovation and analytics.

SecurityWeek reports that Facebook parent firm Meta has expanded its bug bounty program to include rewards for flaws that could be abuse to evade Facebook integrity checks, including two-factor authentication for some business manager accounts, as well as the platform's feature restrictions and application verification processes.

The Hacker News reports that SonarSource has identified a high-severity vulnerability in the open-source RainLoop web-based email client which could be leveraged for email exfiltration.

Despite growing operational technology security awareness amid increasing cybersecurity threats, 40% of industrial organizations reported a lack of compatibility between their security and automation systems, SecurityWeek reports.

StateScoop reports that nearly 1,700 students in Coventry Public Schools in Connecticut may have had their data compromised as a result of a breach at Illuminate Education early this year.