Apple declines to pay Kaspersky vuln reward, Bug Bounty ‘extortion’ dispute, Microsoft Recall backlash – OffSec roundup for CISOs

A monthly offensive-security roundup highlighting bug-bounty disputes (including Apple/Kaspersky and Microsoft/Azure), a critical MOVEit vulnerability (CVE-2024-5806) that increases risk of data exfiltration, major healthcare incidents (Qilin ransomware disrupting UK hospitals and a US breach affecting over a million patients linked to Nuance/Geisinger), and commentary on open-source vulnerability disclosure and evolving CISO responsibilities.