https://blog.dansec.red/cves/cve-2026-34040/Recent content in CVE-2026-34040 on DanSec DailyHugoen-gbWed, 08 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-08-cybersecurity-news/Wed, 08 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-08-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li> <p><strong>Massachusetts Hospital Cyberattack</strong></p> <ul> <li>Signature Healthcare in Massachusetts experienced a cyberattack resulting in ambulance diversions, cancellation of some services, and pharmacy disruptions.</li> </ul> </li> <li> <p><strong>Snowflake SaaS Integrator Breach</strong></p> <ul> <li>Over a dozen companies suffered data theft attacks after a SaaS integration provider was breached, with attackers stealing authentication tokens.</li> </ul> </li> <li> <p><strong>Router Hijacking and Espionage by APT28</strong></p> <ul> <li>The Russia-linked APT28 (Forest Blizzard) compromised MikroTik and TP-Link routers globally, hijacking DNS settings to steal Microsoft 365 and Office authentication tokens.</li> <li>An international law enforcement operation disrupted the “FrostArmada” APT28 campaign.</li> </ul> </li> <li> <p><strong>Critical Infrastructure Attacks by Iran-Linked Actors</strong></p> <ul> <li>Iran-affiliated threat actors targeted internet-exposed programmable logic controllers (PLCs) and SCADA systems in US critical infrastructure sectors, causing operational disruptions.</li> </ul> </li> <li> <p><strong>Doxing, Spyware, and Nonconsensual Abuse</strong></p> <ul> <li>Widespread abuse in Telegram groups, where individuals are purchasing hacking tools, sharing nonconsensual images, and engaging in doxing and spyware deployment.</li> </ul> </li> </ul>