Bayer and 12 other major drug companies caught up in Cencora data loss

A security roundup reports that Cencora suffered an IT intrusion in February that led to exfiltration of personal and medical records affecting multiple major pharmaceutical suppliers; Google patched an in-the-wild Chrome V8 type-confusion zero-day (CVE-2024-5274); several high-severity ICS and VMware flaws were disclosed; the EPA found >70% of US water systems fail basic security controls; and Nissan Oceania experienced customer data exposure tied to an earlier Akira ransomware incident and a third-party supplier breach.