WorldLeaks ransomware group breached the City of Los Angels

Multiple high-impact incidents and vulnerabilities reported: the WorldLeaks ransomware group breached the City of Los Angeles (including Metro) causing service shutdowns and emergency declarations in Bay Area cities; Sansec disclosed a critical “PolyShell” REST API flaw in Magento/Adobe Commerce allowing unauthenticated file uploads and possible XSS (affects versions up to 2.4.9-alpha2); a global campaign defaced over 7,500 Magento sites (15,000+ hostnames); Navia Benefit Solutions suffered a data breach impacting ~2.7 million individuals; Apple warned of Coruna and DarkSword iOS exploit kits;