Scot becomes second Scattered Spider-linked crook to plead guilty in US
2026-04-20T19:24:03Z•ccbf82069d2a7551ef365a6bc3f18a5c57c7f17c060fd275ba39ed5a39e68145
ai-agentsai-securityanthropicapache-activemqautovistacisacredential-compromisecryptocurrency-theftdata-leakexcel-exploitfortinetgithub-agent-hijackmcgraw-hillmicrosoftoauthout-of-band-updatepatch-tuesdayphishingprompt-injectionransomwaresandbox-bypassscattered-spidersim-swapvulnerability-exploitationwindows-server
What happened
A batch of The Register security stories (mid‑April 2026) highlights multiple active and high‑impact threats: criminal phishing/SIM‑swap cryptocurrency theft linked to the Scattered Spider crew; zero‑day and long‑standing vulnerabilities being actively exploited (Excel, Apache ActiveMQ, multiple Microsoft bugs, Fortinet sandbox flaws) prompting CISA and out‑of‑band Microsoft fixes; ransomware incidents and large data leaks (Autovista, McGraw Hill); and growing AI/ML‑centric risks including prompt injection, agent hijacking of GitHub‑integrated AI agents, OAuth/credential compromises tied to V8
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- ccbf82069d2a7551ef365a6bc3f18a5c57c7f17c060fd275ba39ed5a39e68145
- Enrichment time
- 2026-04-20T19:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.