U.S. utility giant Itron discloses a security breach

Multiple high-impact security incidents and vulnerabilities reported: Itron disclosed unauthorized access to parts of its internal IT environment (detected Apr 13, 2026). CrowdStrike patched a critical unauthenticated path-traversal in LogScale self‑hosted (CVE-2026-40050) allowing arbitrary file reads. WordPress Breeze Cache plugin is being actively exploited via CVE-2026-3844 (unauthenticated file upload) affecting hundreds of thousands of sites. ESET identified a new China-aligned APT “GopherWhisper” targeting Mongolian government entities with Go-based loaders/backdoors. Trigona ransomware