DJBSEC's CyberNews 2026-04-28

Today’s daily news covers the following categories: Nation-State/APT Policy & Legislation Malware Threat Intelligence

FAST16 Malware Predated Stuxnet in Targeting Industrial Software

Nation-State/APT Researchers have uncovered FAST16, a previously unknown malware strain that targeted precision engineering software before Stuxnet. The discovery suggests that sophisticated industrial cyber operations began earlier than previously believed. FAST16 was designed to interfere with specialized manufacturing environments, indicating a high level of intent and capability. Its existence highlights the long-standing focus on industrial control systems by advanced threat actors. The finding reshapes understanding of early cyber warfare targeting critical infrastructure. Read More

Microsoft Outlook.com Outage Blocks User Access

Policy & Legislation A widespread issue with Microsoft Outlook.com temporarily blocked users from accessing their email accounts. The disruption impacted productivity and highlighted reliance on cloud-based communication platforms. While not confirmed as a cyberattack, outages of this scale raise concerns about service resilience. Microsoft worked to restore functionality and investigate the root cause. Organizations are reminded to plan for service disruptions and maintain contingency strategies. Read More

AI Reshapes DevSecOps by Embedding Security Into Development

Policy & Legislation AI is transforming DevSecOps by integrating security practices directly into the development lifecycle. Tools powered by AI can identify vulnerabilities earlier and automate remediation efforts. This shift brings security closer to the code, reducing risk before deployment. However, it also introduces challenges around trust and validation of AI-generated outputs. Organizations must balance automation with oversight to ensure secure development practices. Read More

Vidar Malware Hides Payloads in JPEG and Text Files

Malware The Vidar malware is using new techniques to hide its second-stage payloads within JPEG and text files. This approach allows it to evade detection by traditional security tools. Once activated, the malware can steal credentials and sensitive information. The use of common file formats makes the attack more difficult to identify. Organizations should enhance detection capabilities and monitor for unusual file behavior. Read More

Attackers Backdoor CODESYS Applications in Industrial Systems

Nation-State/APT Attackers have been found inserting backdoors into CODESYS applications used in industrial control systems. These backdoors allow unauthorized access and potential manipulation of critical processes. Compromised systems could lead to operational disruptions or physical damage. The campaign highlights ongoing threats to industrial environments. Organizations should secure development pipelines and monitor ICS applications closely. Read More

Pentest AI Agents Introduced to Automate Security Testing

Threat Intelligence New AI-powered pentesting agents are being developed to automate security testing processes. These tools can simulate attacks, identify vulnerabilities, and suggest remediation steps. Automation allows organizations to scale testing and improve efficiency. However, reliance on AI also raises concerns about accuracy and potential misuse. Security teams should combine AI tools with human expertise for best results. Read More