HX Weekly
^{by Hexagon Center}

for the week of April 5, 2026, 116th edition

Your quick weekend update and reminder.

☝️ TWA

Traffic violation scams switch to QR codes in new phishing texts

🤷‍♀️ What now?: Watch out for unsolicited QR codes. It might be fun to scan a QR code but the consequences may be devastating. Additionally, never respond to unsolicited texts you’re not familiar with.

Tools: Cultivate good cyber hygiene by not frivolously scanning QR codes and respond to unsolicited texts and calls.

Meanwhile … Harvard Warns of Active Cyberattack Impersonating IT Staff and Targeting Affiliates

📰 Headline Highlights

• Apple adds macOS Terminal warning to block ClickFix attacks

• Anthropic Claims Its New A.I. Model, Mythos, Is a Cybersecurity ‘Reckoning’

• CIA director quietly elevated agency’s cyber espionage division

• Hack-for-hire spyware campaign targets journalists in Middle East, North Africa

• Hackers exploiting Acrobat Reader zero-day flaw since December

• Perplexity’s “Incognito Mode” is a “sham,” lawsuit says

• Even Microsoft knows Copilot shouldn't be trusted with anything important

• Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long

• Google rolls out Gmail end-to-end encryption on mobile devices

In other news, Minnesota governor sends national guard to county after cyberattack

GOOD READ: US cybercrime losses pass $20B for first time as AI boosts online fraud

It always starts out slow and then things just happen and the news bucket fills up and overflows. While our job is to curate the news and compile them for the newsletter, out main purpose is to keep our readers vigilant. Share with us your experience, what helps you and what you would like to see in future editions.

• SANS 2026 report flags cybersecurity skills crisis, putting critical infrastructure and OT sectors at measurable breach risk

Inside Hexagon

Have you heard about T3? Go to our YouTube channel to learn about another weekly cybersecurity program that we’ve just created. Tell us what themes you’d like to see for future editions.

HOUSEKEEPING

Glossary/Legend:

• Zero Trust - a strategic cybersecurity framework based on the principle of "never trust, always verify," requiring strict identity authentication and authorization for every user and device, whether inside or outside the network perimeter. It assumes breach, removes implicit trust, and employs granular, least-privilege access controls to protect resources. 

• Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.

1. Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.

2. Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.

3. Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.

Spread cybersecurity culture

Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:

hexagoncenter.org

View archives at hxweekly.beehiiv.com

You may reply to this newsletter or email us at
[email protected]

Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.

_{Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.}

_DISCLAIMER

_{Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.}

Content of this newsletter is not an official representation of Hexagon Center.

_{SEE MORE DISCLAIMER HERE}