American utility firm Itron discloses breach of internal IT network
2026-04-27T07:23:35Z•4fea36d0e6fb13f9007150b0e3a51eb2af1e2ed2700560faf8775920faaa9682
ADTBitwardenBlackFileCisco-FirepowerFirestarterItronShinyHuntersSnow-malwareTrigonaUNC6692breeze-cachecredential-theft','microsoft','ms-teams','passkeys','entra','copdata-breachexfiltrationextortionlocal-privilege-escalationmalwarenpm-compromisepack2therootpackagekitransomwaresupply-chainwordpressxsszimbra
What happened
Multiple active security incidents and high-risk vulnerabilities reported: Itron and ADT disclosed breaches (ShinyHunters extortion threat for ADT), while new financially motivated groups (BlackFile) and ransomware actors (Trigona) are conducting data theft and extortion. UNC6692 is deploying a custom 'Snow' malware suite via Microsoft Teams social engineering. Persistent malware (Firestarter) is surviving updates on Cisco Firepower/ASA/FTD devices. Several actively exploited flaws include a critical arbitrary-file-upload bug in the Breeze Cache WordPress plugin and an XSS affecting over 10,00
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 4fea36d0e6fb13f9007150b0e3a51eb2af1e2ed2700560faf8775920faaa9682
- Enrichment time
- 2026-04-27T07:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.