Microsoft Patch Tuesday statistics

 

The April 14, 2026 Patch Tuesday addressed 167 flaws, including 2 zero‑day vulnerabilities (one actively exploited). 

It’s widely reported as one of Microsoft’s largest Patch Tuesday releases to date.

Maryland bans Surveillance pricing

 

Maryland banned using your personal data to secretly charge you more for groceries than someone else — a first in the U.S.

Under the Protection from Predatory Pricing Act, Maryland will become the first U.S. state to outlaw this practice in the grocery sector. The law:

Prohibits

• Using personal or surveillance data to set individualized grocery prices
• Charging different people different prices for the same grocery item based on who they are
• Real‑time price changes driven by consumer profiling

Requires

• Grocery prices generally remain fixed for at least one business day, limiting sudden price spikes from digital tag
   
  
  

   
   

Booking.com data breach follow up

 

Booking.com data breach April 14, 2026

  Customers began receiving notifications April 12-13

According to Booking.com’s own notifications and follow‑up reporting, the exposed information may include:

• Names
• Email addresses
• Phone numbers
• Postal addresses
• Reservation details (dates, property info, itinerary)
• Messages or notes shared with accommodation providers

Booking.com has repeatedly stated that payment and credit‑card data were not accessed.

Booking.com reports it:

• Reset reservation PIN codes tied to affected bookings
• Contacted impacted customers directly by email
• Advised customers to be vigilant for phishing attempts
• Stated the incident is now “under control”, though investigations are ongoing

The company has not disclosed:

• How many customers were affected
• Exactly when the breach occurred
• Technical details of how the access happened

• While no financial data was taken, experts warn that the combination of personal info + travel details makes this breach particularly dangerous. Attackers can craft highly convincing phishing messages (email, SMS, WhatsApp, or phone calls) that reference real bookings.

  Reports already show customers receiving scam contacts pretending to be Booking.com or their hotel, asking for “verification” or payments.

   

  Booking.com has emphasized that it will never:

  • Ask for credit‑card details
  • Request bank transfers
  • Ask for personal information via email, phone, text, or WhatsApp

  Customers are strongly advised not to click links in unsolicited messages claiming to be from Booking.com or properties. 

   

  Based on Booking.com’s guidance and security reporting:

  • ✅ Treat unexpected messages about bookings as suspicious
  • ✅ Verify any issue by logging directly into Booking.com (not via links)
  • ✅ Be cautious of urgent payment or “verification” requests
  • ✅ Monitor email and messaging apps for phishing attempts

   

Anthropic Mythos

  AI giant Anthropic announced a new model called Mythos..
Mythos finds security flaws in software. Windows, MacOS, Linux, browsers, aps, ANYTHING.

 This prompted a urgent meeting with the Treasury Secretary, the Federal Reserve, and Wall Street executives.

 Given the scope of this tool  it might be good to use more acceptance to offered patching.

WARNING from FBI, NSA, CISA and Department of Energy - Ireanian hackers

 Collective alarm from US government agencies citing Iranian attacks in US Critical Infrastructure via exploits in Programmable Logic Controllers (PLCs).

 Mutually Assured Disruption

A report cites 5,200 device reachable on the Internet.

 

Russia spy agency reported to be hacking into home and small business routers

 As a follow on to the recent blog post of  March 30 where the FCC has banned almost all consumer grade routers not made in the United States - a Russian spy agency was recently found to be hacking into TP-Link and MicroTik routers with known vulnerabilities to route victim's Internet traffic to servers under the control of Russian hacking unit known as Fancy Bear.

 The intent is to steal passwords and OAuth tokens to gain access th those accounts.

 The FBI has secured a court order allowing them to effectively hack into the affected routers and remove the dodgy DNS records.