In this week's Security Sprint Dave and Andy covered the following topics:

Opening

• Homeland Security Funding Bill Passed, Includes Money for CISA

• Browser Extensions and Shadow AI: Unmanaged Threats to Privacy — Gate 15

• Data Centers, Telecommunications Networks, and Space-Based Systems: Modernizing DHS’s SRMA Role for the Communications and IT Sectors — House Committee on Homeland Security

• New Cybersecurity Guide Targets Rising Threats to Food and Agriculture SMBs

• Maine Law Requires Hospitals to Enact Cybersecurity Plans

Main Topics

• New FTC Data Show People Have Lost Billions to Social Media Scams - Federal Trade Commission - 23 Apr 2026 The Federal Trade Commission reported that consumers have lost billions of dollars to scams originating on social media platforms, with fraudsters leveraging impersonation, investment schemes, and romance scams to exploit user trust.

• Take9! 9 Seconds For A Safer World. Cyber threats are everywhere. And getting sneakier. What can you do to protect yourself, your community and our nation?

• New 2026 ‘IOCTA’ highlights sophisticated tactics and emerging challenges in the digital landscape – Europol unveils comprehensive analysis of evolving cybercrime threats - Europol - 28 Apr 2026 Europol released its 2026 Internet Organised Crime Threat Assessment, warning that encryption, proxies, artificial intelligence, dark web marketplaces, cryptocurrencies, fraud ecosystems, ransomware, and child sexual exploitation are expanding the cybercrime landscape.

• Global Encryption Coalition (GEC). The Global Encryption Coalition (GEC) was founded in 2020 by the Center for Democracy & Technology, Global Partners Digital and the Internet Society and now has over 350 members. Gate 15 is a proud member of the GEC.

Ransomware! Weekly ransomware & data leak landscape; A seven-day view of claim activity, leak escalation, actor concentration, sector shifts, and supporting news context from eCrime.ch. — eCrime.ch — 26 Apr 2026. The eCrime weekly report provides a seven-day analysis of ransomware claim activity, data leak site postings, actor concentration, and sector targeting trends.

• NCC Group Monthly Threat Pulse - Review of March 2026

• Ransomware and Cyber Extortion in Q1 2026 - ReliaQuest

Presidential Message on National Hurricane Preparedness Week - The White House - 03 May 2026 This message encourages Americans in hurricane-prone areas to prepare before the season by protecting property, building emergency plans, assembling supplies, and monitoring forecasts and evacuation routes. It emphasizes local and state frontline roles while describing federal support for response and recovery.

• Hurricane Preparedness - NOAA

• Summer forecast 2026: Heat, severe storms to shape the season as El Niño develops, strengthens - AccuWeather

• 2026 Hurricane Awareness Webinars - NOAA

Quick Hits

• Email threat landscape: Q1 2026 trends and insights — Microsoft Security Blog

• Tycoon2FA disruption impact

• QR code phishing attacks

• CAPTCHA tactics

• Malicious payloads

• Business email compromise

• Defending against email threats

• Microsoft Defender detections

• Alert - AL26-008 - Vulnerability affecting cPanel and WebHost Manager (WHM) - CVE-2026-41940 - Canadian Centre for Cyber Security

• Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

• To recover your files kindly send 0.1 BTC to… ransom note appears on websites

• The cPanel Situation Is… -

• cPanel authentication bypass vulnerability CVE-2026-41940 exploited

• Over 40,000 Servers Compromised in Ongoing cPanel Exploitation

• Cole Allen’s journey from Caltech grad to accused gunman in D.C. attack

• Footage shows White House correspondents' dinner suspect 'casing' hotel: US attorney

• Washington Hilton says it was using Secret Service protocols on night of attack