23andMe settles class-action breach lawsuit for $30 million

Infosec roundup: 23andMe agreed to a $30M settlement over its 2023 breach that exposed data of ~6.4M U.S. customers; critical vulnerabilities were highlighted (notably GitLab CVE-2024-6678 and SonicWall CVE-2024-40766, with active exploitation reported) alongside ongoing abuse of older flaws like ImageMagick; Apple moved to drop its NSO lawsuit, an IRS IT supervisor pled guilty to bribery, a malicious Python package job-offer campaign (likely DPRK-linked) is infecting developers, and two operators of a long-running dark web market were indicted.