RansomHub-linked EDR-killing malware spotted in the wild

Infosec in brief: Sophos analysts identified EDRKillShifter, a Windows malware that leverages known vulnerable drivers to disable EDR and deploy RansomHub; SolarWinds Web Help Desk (CVE-2024-28986) is a critical Java deserialization RCE now believed to be exploited; thousands of NetSuite public sites may leak customer PII due to misconfiguration; recent ransomware/data-theft incidents impacted an Australian mining company and Kootenai Health (≈500k patient records); and ReliaQuest highlights five impactful malware families including infostealers and Rust-based threats.