Utilities Tech Supplier Itron Discloses Cyber-Attack, Operations Unaffected

This digest aggregates multiple cybersecurity developments from late April 2026: Itron confirmed a cyber incident with no expected material operational impact; UK Biobank health records for ~500,000 volunteers were listed for sale; a new fast16 sabotage malware family predating Stuxnet was reported; researchers disclosed a worm-like npm supply-chain campaign stealing developer credentials; dozens of browser extensions openly sell user data; a Mirai-based botnet actively exploits CVE-2024-3721 in TBK DVR devices; Vercel and other vendors reported incidents tied to third-party tool exploitation;