This week: 86,000 Fortinet devices compromised, 24 billion credentials leaked, OAuth tokens stolen via a forgotten...
Weekly cybersecurity news: Quantum threats and HNDL
This week: 86,000 Fortinet devices compromised, 24 billion credentials leaked, OAuth tokens stolen via a forgotten service account, and an AI agent exfiltrated AWS credentials in under two minutes. 14 incidents, one pattern — and three actions your team can take right now.
APT28 hijacked 18,000 routers to steal OAuth tokens. Storm-2372 bypassed MFA without touching a password. 28.6 million...
Credential threats in April 2026: Supply chain attacks and 28 million exposed secrets
APT28 hijacked 18,000 routers to steal OAuth tokens. Storm-2372 bypassed MFA without touching a password. 28.6 million secrets leaked on GitHub. April 2026's biggest incidents — and what they have in common.
Spring 2026 brought the EU's most significant institutional breach, its first cyber sanctions of the year, and four...
Spring 2026 EU cybersecurity update: What changed & how to prepare
Spring 2026 brought the EU's most significant institutional breach, its first cyber sanctions of the year, and four major cybersecurity regulations enforcing simultaneously. NIS2, DORA, CRA, and CSA2 now set hard deadlines — and real penalties. Here's what changed, who's affected, and what to do.
