23andMe Faces New Security Mandates in $18m Data Breach Settlement

Multiple high-impact security stories: CISA has issued an urgent patch directive for two actively exploited critical Fortinet vulnerabilities; Microsoft released a record 570-CVE Patch Tuesday as AI-driven discovery increases patch volumes; researchers disclosed eleven Microsoft-signed UEFI shims that enable widespread Secure Boot bypass; ransomware trends shift (The Gentlemen rising) while new destructive/espionage malware (GigaWiper) and kernel-removing ransomware (GodDamn/PoisonX) are observed. Significant phishing and malware campaigns abused novel delivery techniques (Lua loader disguised