Sunday 26 April 2026

Major Incidents or Breaches

• 500,000 UK health records have been listed for sale on Alibaba, indicating a significant data breach involving sensitive personal information.
• Discord users gained unauthorized access to Anthropic’s Mythos, exposing internal information from the AI company.

Newly Discovered Vulnerabilities

• Apple has patched a notification bug that could potentially reveal sensitive information to unauthorized parties.

Notable Threat Actor Activity

• The China-linked APT group “GopherWhisper” is conducting targeted attacks against government entities. The group leverages multiple Go-based backdoors and employs custom loaders and injectors, abusing legitimate services to evade detection.
• Threat actor UNC6692 is using Microsoft Teams for social engineering, deploying a new malware suite called “Snow.” The suite includes a browser extension, tunneler, and backdoor to maintain persistence and facilitate lateral movement.

Trends, Tools, or Tactics of Interest

• Researchers have uncovered “fast16,” a Lua-based malware predating Stuxnet, designed to target engineering software used in industrial environments, with indications it was intended for sabotage.
• Threat groups are increasingly abusing legitimate collaboration and communication platforms (e.g., Microsoft Teams, Discord) to deliver malware and gain unauthorized access.
• Spy firms are exploiting weaknesses in global telecom infrastructure to track targets, highlighting ongoing concerns around telecom security.

Regulatory or Policy Developments Affecting the Security Industry

• Microsoft has announced a revamp of the Windows Insider Program to address performance and reliability issues in Windows 11, which may impact enterprise testing and deployment practices.