Hacker Group LAPSUS$ Claims Alleged AstraZeneca Data Breach

Multiple security stories: LAPSUS$ claims a breach of AstraZeneca and is offering alleged source code, credentials, cloud configuration files and employee data samples for sale. Researchers also reported several active malware and social‑engineering campaigns: a realistic JavaScript-based fake Zoom meeting invite that spreads Windows malware; a malicious Windsurf IDE extension that leverages the Solana blockchain to steal developer credentials; and a ClickFix scam that tricks users into mapping attacker-controlled drives and loading malware. Additional items include the “Claudy Day” ad‑based a