Itron investigated unauthorized access while utility services continued
Itron disclosed unauthorized access to corporate systems while saying customer-hosted systems and core operations continued without material disruption.
3 min readOpen brief →
Verified cybersecurity, fraud and digital-banking signals with decision context, affected audiences and practical actions.
TOPIC HUBSBrowse cybersecurity topics →
ADT says customer data was stolen in cyber intrusion
ADT confirmed limited customer-data exposure from unauthorized cloud access while saying payment data and customer security systems were not compromised.
3 min readOpen brief →
Trigona ransomware adopts a custom data-exfiltration tool
Trigona affiliates are using a custom exfiltration tool designed to move valuable files quickly while avoiding detections tied to common utilities.
3 min readOpen brief →
Bitwarden CLI npm package compromise exposed developer credentials
A malicious Bitwarden CLI npm release briefly put developer credentials and downstream software environments at risk. The vendor’s core vault service was not reported compromised.
3 min readOpen brief →
Commercial surveillance tools exploited telecom networks to track people
Commercial surveillance tools exploited telecom networks to track people. CyberScoop documented the development in April 2026. SecBriefs checked the central claim against a primary record or genuinely independent…
3 min readOpen brief →
Rituals discloses customer data breach affecting membership records
Rituals says attackers accessed customer membership data, but passwords and payment information were not part of the confirmed breach.
3 min readOpen brief →
UK cyber agency urges services to replace passwords with passkeys
UK cyber agency urges services to replace passwords with passkeys. UK NCSC documented the development in April 2026. SecBriefs checked the central claim against a primary record or…
3 min readOpen brief →
Medical records linked to 500,000 Britons appeared for sale online
Medical records linked to 500,000 Britons appeared for sale online. The Record documented the development in April 2026. SecBriefs checked the central claim against a primary record or…
3 min readOpen brief →
CISA orders remediation of exploited Microsoft Defender BlueHammer flaw
CISA ordered federal agencies to remediate the exploited BlueHammer Microsoft Defender flaw after Microsoft released an April patch.
3 min readOpen brief →
Deleted Signal messages remained recoverable from iPhone notification records
Deleted Signal messages remained recoverable from iPhone notification records. Schneier on Security documented the development in April 2026. SecBriefs checked the central claim against a primary record or…
3 min readOpen brief →
China-nexus hackers increasingly hide behind hijacked consumer-device proxy networks
Hijacked home and small-office devices are increasingly being used as covert infrastructure that makes hostile traffic look local and ordinary.
3 min readOpen brief →
Kyber ransomware experiments with post-quantum encryption
Kyber ransomware is experimenting with post-quantum encryption while targeting both Windows servers and VMware ESXi environments in the same campaign.
3 min readOpen brief →
Researchers find destructive Lotus Wiper campaign targeting Venezuela’s energy sector
A targeted wiper campaign against Venezuela’s energy sector highlights how cyber incidents can shift from access to irreversible destruction.
3 min readOpen brief →
France Titres confirms cyber incident affecting administrative-document data
France Titres confirmed a breach while the exact scale of attacker-claimed citizen data remained under investigation. Citizens should expect follow-on impersonation risk.
3 min readOpen brief →
Scattered Spider member admitted hacking and multimillion-dollar crypto theft
Scattered Spider member admitted hacking and multimillion-dollar crypto theft. KrebsOnSecurity documented the development in April 2026. SecBriefs checked the central claim against a primary record or genuinely independent…
3 min readOpen brief →
Fake IT helpdesk calls in Teams can lead to workplace compromise
Fake IT helpdesk calls in Teams can lead to workplace compromise. CSO Online documented the development in April 2026. SecBriefs checked the central claim against a primary record…
3 min readOpen brief →
Ukraine confirms suspected APT28 campaign targeting prosecutors
Ukraine says a long-running espionage campaign targeted prosecutors and investigators through Roundcube webmail vulnerabilities linked to APT28 activity.
3 min readOpen brief →
Global police operation targeted tens of thousands of DDoS-for-hire users
Global police operation targeted tens of thousands of DDoS-for-hire users. Europol documented the development in April 2026. SecBriefs checked the central claim against a primary record or genuinely…
3 min readOpen brief →
Leaked Windows zero-days begin appearing in active attacks
Three Windows flaws moved from public proof-of-concept code into reported active exploitation, raising urgency around privilege escalation and Defender tampering.
3 min readOpen brief →
Autovista works to restore services after ransomware attack
Autovista is restoring systems after a ransomware incident disrupted operations in Europe and Australia, while the investigation and confirmed impact remain limited.
3 min readOpen brief →
McGraw-Hill confirmed data exposure tied to a Salesforce-hosted webpage
A Salesforce-hosted webpage exposed limited company data even though McGraw-Hill said its core systems and customer databases were not breached.
3 min readOpen brief →
Basic-Fit says data breach affects about one million members
Basic-Fit says about one million members were affected after an intruder downloaded contact, identity and bank-account information before access was blocked.
3 min readOpen brief →
Fake Ledger Live app in Apple’s App Store was linked to $9.5 million in crypto losses
A fake wallet app passed through a trusted software marketplace and turned recovery-phrase theft into multimillion-dollar losses. for victims.
3 min readOpen brief →
JanaWare ransomware targets users in Turkey with localized campaign
JanaWare uses Turkish-language targeting, location checks and phishing delivery to focus ransomware activity on users and smaller businesses in Turkey.
3 min readOpen brief →