Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 – here’s some of what made the headlines this month
30 Apr 2026
With April coming to a close, it’s time for ESET Chief Security Evangelist Tony Anscombe to look back at some of the top cybersecurity stories that made the news this month. Tony also offers insights that the they may hold for your own cyber-defenses. Here’s some of what caught Tony’s attention this month:
- Microsoft has issued a warning about helpdesk impersonation scams where bad actors increasingly misuse external Microsoft Teams collaboration to trick users into granting them remote access.
- Iranian-linked hackers are targeting Rockwell programmable logic controllers (PLCs), with almost 4,000 such devices exposed on the networks of U.S. critical infrastructure organizations, according to a warning from multiple U.S. federal agencies.
- The FBI’s Internet Crime Complaint Center (IC3) has issued their annual report that found that U.S. victims lost nearly $21 billion to cyber-enabled crimes last year.
What are some key mitigation steps vis-a-vis the attacks leveraging Teams? How can critical infrastructure organizations using Rockwell PLCs stay safe? How do the FBI’s figures compare to those from 2024 and what was the most damaging scam to affect businesses last year? Learn this and more from Tony’s video and be sure to check out the March 2026 edition of Tony’s monthly security news roundup for more insights.