Last Week in Ransomware: 10.14.2024

**Executive Summary:** A ransomware news briefing details multiple recent incidents: an attack disrupting American Water's billing systems, ransomware-forced closures in K-12 schools, active exploitation of PHP vulnerability CVE-2024-4577 by the TellYouThePass group (including an in-memory .NET variant using mshta.exe and VBScript), and a large FBCS breach affecting millions of customers across major companies; the report highlights active exploitation, significant downstream impacts from third-party compromises, and the need for urgent patching and strengthened defenses.