ShieldBreak bypasses Defender, Lazarus's SYSTEM zero-day, Oklahoma State's 710GB leak

Iran hits water utilities, LoadMaster's KEV deadline, WordPress's XSS2Shell

Plus: an 18-year-old Linux kernel bug and 200 compromised Swiss government accounts

N-central's second strike, a perfect-10 credential bug, DragonForce hits TUI

Plus: Dataminr says attackers now break out in under 30 minutes, and SOCRadar untangles the identity-leak mess