FIN6 uses fake resumes to deliver malware, Microsoft patches WebDAV flaw, and fake SoraAI lures steal data. Sompo breach hits 17.5M, BHA attacked, DDoS hits Roularta. Swimlane raises $45M.