Just a note, if you use the transcript feature, there may be inaccuracies, especially since some companies and or people's names may not be spelled as it is in the newsletter.

Hello folks, welcome to Sans, episode 40.

I know its been awhile since we've done specific newsletters, and this newsletter is dated April 28, 2026.

While not at the top of the news, ADT and other breaches are covered in the rest of the news, and we've already written this up on our own blog.

Here is what is at the top of the news.

Cisco Flaws Exploited for Backdoor in US Federal Agency’s Systems

CISA Adds Four CVEs to KEV; All Were Disclosed a Year or More Ago

Here is what is in the rest of the news.

Fast16 Cyber Sabotage Framework is Older than Stuxnet

ADT Discloses Data Breach

UK Biobank Data Listed for Sale Online

Itron and Medtronic Breached

Canada’s First SMS Blasters Confiscated, Operators Arrested

FCC's Router Ban Now Includes Portable Hotspots

Chinese National Extradited to US from Italy to Face Charges Related to HAFNIUM Campaign

If you would like to read the coverage we wrote up after reading some coverage of the ADT hack, please read our blog post titled ADT, the alarm company, breached … again as we break down what may be true versus what is reported to be confirmed.

I have not read the other in regards to Medtech and the other breaches mentioned in the Newsletter but saw it through Bleeping Computer.

Please feel free to contact us through our contact page on the blog or my web site. Thanks for listening, make it a great day!