Blue Yonder ransomware termites claim credit

Infosec in brief: The report summarizes several active incidents — Termite ransomware (a modified Babuk strain) claiming 680GB exfiltrated from supply-chain SaaS provider Blue Yonder with downstream customer disruptions; two critical, actively exploited vulnerabilities (CVE-2024-11667 and CVE-2024-11680) with CVSS 9.8; and a Safelinking database exposure affecting millions of private links and >156k accounts. Additional items include a suspected China-linked espionage intrusion, a high-profile BEC sentencing, and reporting on alleged domestic use of Pegasus.