Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies

2026-04-03T08:51:49Z83812b587f46fc407af265379f612213fc7aa8125593c40a6f9813c6dc1f537d
AGEWHEEZECISA-KEVChromeCiscoDawnGoogleHandalaHasbroIran-linkedLiteLLMNorth-Korea-linkedPSK WindSentinelOneUNC1069WebGPUdata-breachfree-vpn-privacymalwarenation-statenpm-compromisephishingspywaresupply-chainzero-day

What happened

Multiple high-impact incidents and advisories: pro‑Iran “Handala” operators claim a breach of Israeli defence contractor PSK Wind (command-and-control systems). Hasbro is investigating a cyberattack and potential data exposure. Cisco issued patches for multiple critical/high flaws (including CVE-2026-20093). Google fixed an actively exploited Chrome zero-day (CVE-2026-5281, a WebGPU/Dawn use-after-free) which CISA added to its KEV list. Google also attributed an Axios npm supply-chain compromise to North Korea‑linked UNC1069. Other notable activity: UAC‑0255 phishing (impersonating CERT‑UA) to

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
83812b587f46fc407af265379f612213fc7aa8125593c40a6f9813c6dc1f537d
Enrichment time
2026-04-03T08:51:49Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies · Baitaphish