Nearly 3M people hit in Harvard Pilgrim healthcare data theft

Infosec roundup: Harvard Pilgrim confirmed a March 2023 ransomware-related intrusion and data theft now affecting ~2.86M people; multiple critical Cisco and industrial vulnerabilities (several CVSS ~8.6–10) were disclosed—some under active exploitation; TheMoon worm has re-emerged, infecting end-of-life SOHO routers and growing a ~40,000-node botnet used in crime-focused proxy operations; and the UK regulator has moved to prosecute Sellafield Ltd for multi-year IT security failures.