Infosec bits for 2026 week 14

Zoya Vilakazi | April 2, 2026, 2:45 p.m.

Cybersecurity News:

Stats SA breached in cyberattack [Staff Writer, Business Tech]

AI Is Redefining Software Supply Chain Security [Terry Sweeney, DarkReading]

Data Breaches and Attacks:

European Commission confirms data breach after Europa.eu hack [Sergiu Gatlan, Bleeping Computer]

Nissan says stolen data came from third-party vendor after hacking group claims breach [Jonathan Greig, The Record]

Cisco Says User Data Stolen in CRM Hack [Eduard Kovacs, Security Week]

Cyberattack hits Hasbro, impacting orders and shipping [David Jones, Cybersecurity Dive]

Vulnerabilities and Patches:

OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability [Ravie Lakshmanan, The Hacker News]

Cisco patches partly critical vulnerabilities in several products [Dirk Knop, Heise Online]

F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation [Rob Wright, Dark Reading]

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released [Ravie Lakshmanan, The Hacker News]

New EvilTokens service fuels Microsoft device code phishing attacks [Bill Toulas, Bleeping Computer]

Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit [Ravie Lakshmanan, The Hacker News]