Datacus extractus: Harry Potter publisher breached without resorting to magic

Infosec roundup: Scholastic was reportedly breached via stolen employee credentials with roughly 8 million customer records exfiltrated; Claroty disclosed critical RCE vulnerabilities in Planet switches (and a high-severity Qlik Sense RCE being actively exploited); researchers found thousands of Android apps leaking secrets; Dutch universities suffered multi-day DDoS outages; and North Korea-linked Lazarus (Operation 99) ran an advanced fake-job campaign to deploy crypto-stealing malware—additionally, Texas sued Allstate over large-scale driver data collection.