Cybersecurity briefing, 2026-04-28

An incomplete Microsoft patch handed APT28 a zero-click way to steal Windows credentials, and the real fix only landed earlier this month.

• Trusted Data Tool Poisoned, Then Its Container Image Too
• Cisco Firewall Backdoors Survive Patching
• Itron breach leaves utility customers uncertain
• Developer Tooling Compromises Return Across npm, PyPI, and Docker
• Vishing Crew Turns Helpdesks Into Credential Farms
• macOS Users Become the Weak Link in Fake Updates
• AI Agents Turn Web Pages Into Attack Payloads
• Medtronic Breach Exposes Corporate Data, Not Products
• RPC Architecture Lets Impersonating Processes Reach SYSTEM
• PackageKit Auth Bypass Turns Local Users Root
• Spamouflage Fails to Move Tibetan Diaspora Voters

Recent editions

• Monday, April 27, 2026: Cisco Firewall Backdoors Survive Patching · 14 stories
• Sunday, April 26, 2026: GopherWhisper Turns Collaboration Tools Into Espionage Channels · 9 stories
• Saturday, April 25, 2026: Cisco Firewall Backdoors Survive Patching · 19 stories
• Friday, April 24, 2026: Cisco Firewall Backdoors Survive Patching · 18 stories
• Thursday, April 23, 2026: iPhone Notification Cache Exposed Deleted Signal Messages · 17 stories
• Wednesday, April 22, 2026: ActiveMQ Brokers Exposed to Active Exploitation at Scale · 18 stories
• Tuesday, April 21, 2026: ActiveMQ Brokers Exposed to Active Exploitation at Scale · 17 stories