Cybersecurity briefing — 2026-04-28

An incomplete Microsoft patch handed APT28 a zero-click way to steal Windows credentials, and the real fix only landed earlier this month.

• Trusted Data Tool Poisoned, Then Its Container Image Too
• Cisco Firewall Backdoors Survive Patching
• Itron breach leaves utility customers uncertain
• Developer Tooling Compromises Return Across npm, PyPI, and Docker
• Vishing Crew Turns Helpdesks Into Credential Farms
• macOS Users Become the Weak Link in Fake Updates
• AI Agents Turn Web Pages Into Attack Payloads
• Medtronic Confirms Corporate IT Breach After ShinyHunters Claim
• RPC Architecture Lets Impersonating Processes Reach SYSTEM
• PackageKit Auth Bypass Turns Local Users Root
• Spamouflage Fails to Move Tibetan Diaspora Voters