Stay updated with the latest cybersecurity news! This daily roundup covers major data breaches hitting telecom and consumer sectors, urgent ICS advisories for industrial control systems, newly disclosed zero-days in development tools and PDF readers, and surging ransomware pressure on healthcare providers to keep you informed and secure in the ever-evolving digital landscape.
1. Dutch Telecom Giant Odido Confirms Breach Exposing 6 Million Customer Identities
Published: 2026-04-04
Odido disclosed a major incident where attackers accessed names, banking details, and passport information for millions of customers. The data has already appeared on underground forums, prompting urgent notifications and credit monitoring offers.
2. Toy Maker Hasbro Hit by Cyber Attack with Internal Systems Compromised
Published: 2026-04-05
Hasbro confirmed unauthorized access to its networks, with attackers exfiltrating sensitive internal data. The company is working with authorities while assessing the full scope of the breach.
3. CISA Releases Four New ICS Advisories for Siemens SICAM Products
Published: 2026-04-02
CISA issued urgent guidance on vulnerabilities in Siemens SICAM 8 and related industrial control systems, warning of risks to energy and utility operators. Multiple high-severity flaws could allow remote code execution or denial-of-service.
4. Zero Day Initiative Discloses Critical RCE in Microsoft Visual Studio Code
Published: 2026-04-02
ZDI publicly detailed CVE-2026-21518, a command injection flaw in VS Code’s mcp.json handling that could lead to remote code execution. Developers are urged to apply updates immediately.
5. CareCloud Healthcare Breach Exposes Millions of Patient Medical Records
Published: 2026-04-03
Electronic health record provider CareCloud confirmed attackers accessed sensitive patient data, including medical histories and personal identifiers. The incident highlights ongoing risks to healthcare systems.
6. Paint Giant AkzoNobel Confirms Ransomware Attack on U.S. Operations
Published: 2026-04-03
AkzoNobel revealed that a ransomware group breached its U.S. site and stole large volumes of internal data. The company stated the attack was contained but samples of stolen files have been leaked online.
7. Mozilla Firefox Zero-Day in IonMonkey Engine Disclosed by ZDI
Published: 2026-04-02
ZDI published details of CVE-2026-4698, a type confusion vulnerability in Firefox’s IonMonkey JavaScript engine that could enable remote code execution. Firefox users should enable automatic updates.
8. Australia’s Healthcare Sector Faces Intensified Ransomware Campaigns
Published: 2026-04-05
Multiple threat groups are exploiting legacy systems and weak controls in Australian healthcare, with several providers reporting active ransomware pressure and data extortion attempts.
Stay Vigilant
Cyber threats are evolving rapidly with attackers targeting telecom giants, consumer brands, and critical industrial systems while ransomware continues to hammer healthcare. Subscribe to our newsletter for daily updates, apply all Siemens SICAM and Visual Studio Code patches without delay, review your exposure if you’re an Odido or CareCloud customer, enable automatic browser and development tool updates, and strengthen segmentation in healthcare and ICS environments. Stay safe online!