This month in security with Tony Anscombe – April 2026 edition
At a glance
- Severity
- Low
- Used in attacks
- No flaws named
- Reported by
- 1 outlet
Video
Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 - here's some of what made the headlines this month
30 Apr 2026
With April coming to a close, it's time for ESET Chief Security Evangelist Tony Anscombe to look back at some of the top cybersecurity stories that made the news this month. Tony also offers insights that the they may hold for your own cyber-defenses. Here's some of what caught Tony's attention this month:
- Microsoft has issued a warning about helpdesk impersonation scams where bad actors increasingly misuse external Microsoft Teams collaboration to trick users into granting them remote access.
- Iranian-linked hackers are targeting Rockwell programmable logic controllers (PLCs), with almost 4,000 such devices exposed on the networks of U.S. critical infrastructure organizations, according to a warning from multiple U.S. federal agencies.
- The FBI's Internet Crime Complaint Center (IC3) has issued their annual report that found that U.S. victims lost nearly $21 billion to cyber-enabled crimes last year.
What are some key mitigation steps vis-a-vis the attacks leveraging Teams? How can critical infrastructure organizations using Rockwell PLCs stay safe? How do the FBI's figures compare to those from 2024 and what was the most damaging scam to affect businesses last year? Learn this and more from Tony's video and be sure to check out the March 2026 edition of Tony's monthly security news roundup for more insights.
Let us keep you
up to date
Sign up for our newsletters
Discussion
Reproduced in full under licence from WeLiveSecurity. © WeLiveSecurity.
Coverage
One outlet has carried this so far.
2026-04-30 09:00 UTC
Related stories
- Most Fraudulent Hires Receive Credentials Before Detection
Infosecurity Magazine · 2026-09-15
- Zelensky appoints former police chief to lead Ukraine’s cyber coordination center
The Record · 2026-09-15
- Electric and gas utility CenterPoint Energy warns of data breach after dark web post
The Record · 2026-09-15
- Black Axe Members Extradited to US Over Internet Fraud Claims
Infosecurity Magazine · 2026-09-15
- Manhattan DA takes down 12 AI deepfake porn sites
The Record · 2026-09-15