France continues its move toward digital sovereignty.

Summary

By the N2K CyberWire staff

France continues its move toward digital sovereignty.

The French government is moving ahead with its efforts to reduce reliance on US technology, ordering all government ministries to submit plans by this fall outlining how they will shift toward European or open-source alternatives, BankInfoSecurity reports. The plans must focus on "workstations, collaborative tools, antivirus software, artificial intelligence, databases, virtualization, and network equipment."

The French Interministerial Directorate for Digital Affairs (DINUM) announced last week that it was moving from Windows to Linux workstations. DINUM, alongside the Directorate General for Enterprises (DGE), the National Cybersecurity Agency of France (ANSSI), and the State Procurement Directorate (DAE), held a seminar on Wednesday to outline ways to reduce dependency on non-European technology. David Amiel, Minister of Public Action and Accounts, stated, "We can no longer accept that our data, our infrastructure, and our strategic decisions depend on solutions whose rules, pricing, evolution, and risks we do not control."

What comes after the AI hype with Kevin Magee from Microsoft for Startups?

The next wave of cybersecurity startups will emerge alongside rapidly evolving AI technologies and founders must focus on solving real customer problems instead of chasing hype. Kevin Magee leads the cybersecurity portfolio for Microsoft for Startups, and understands deeply how partnerships, data, and go-to-market discipline ultimately determine success. Listen to Kevin Magee and Dave Bittner discuss what comes after AI hype, live at the RSAC Conference 2026.

Adobe fixes zero-day flaw in Acrobat Reader.

Adobe has issued an emergency patch to address a zero-day flaw in Acrobat Reader for Windows and macOS, BleepingComputer reports. The vulnerability (CVE-2026-34621) can allow malicious PDF files to access privileged JavaScript APIs and achieve arbitrary code execution. Attackers have been exploiting the vulnerability since at least December 2025. Exploitation requires a user to open a malicious file.

The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered Federal agencies to patch the flaw by April 27th.

Triad Nexus cybercrime network shifts focus toward emerging markets.

Researchers at Silent Push say the Triad Nexus cybercrime network continues to expand operations in spite of US sanctions targeting the network last year. Triad Nexus, which is tied to organized crime in Asia, facilitates impersonation and investment scams, money laundering, and illegal gambling operations, causing over $200 million in reported losses. After the US levied sanctions against the network, Triad Nexus began blocking US IP addresses from accessing many of its phishing sites and began pivoting to the Spanish, Vietnamese, and Indonesian markets.

Notes.

Today's issue includes events affecting , and .

Selected Reading

Attacks, Threats, and Vulnerabilities

Cyber Intel Brief: Pro-Iranian Actor Ababil of Minab Claims Cyberattack on LA Metro (LACMTA) (Dataminr) Pro-Iranian threat actor Ababil of Minab has claimed responsibility for a cyberattack against the Los Angeles County Metropolitan Transportation Authority (LACMTA), alleging administrative access to virtualization infrastructure, web servers, and an operational rail yard management system, alongside claims of 500 TB of data destruction and 1 TB of sensitive data exfiltration.

GlassWorm evolves with Zig dropper to infect multiple developer tools (Security Affairs) The GlassWorm campaign uses a Zig-based dropper hidden in a fake IDE extension to infect developer tools and compromise systems.

SAP Patches Critical ABAP Vulnerability (SecurityWeek) The company has released 19 new security notes addressing flaws in over a dozen enterprise products.

Booking.com Confirms Data Breach as Hackers Access Customer Details (Hackread) Booking.com confirms a data breach exposing customer details to hackers. No payment data accessed, but users face risk of targeted phishing scams now!

Litigation, Investigation, and Law Enforcement

UK government threatens tech bosses with jail time if they do not adequately fight nudification tools (The Record) A U.K. communications regulator, Ofcom, has said it will be cracking down on the spread of the images in the aftermath of the Grok scandal, which led to millions of “nudified” images of women and children to be circulated worldwide.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

SO-CON 2026 (Arlington, Virginia, USA, Apr 13 - 14, 2026) SO-CON is the only conference dedicated to identity-based security and attack path management. The week begins with a two-day main conference packed with talks, research, and community exchange, followed by four days of deep-dive, hands-on trainings led by adversary-experienced practitioners. Training to follow on April 15-18, 2026.

Space Symposium 2026 (Colorado Springs, Colorado, USA, Apr 13 - 16, 2026) Space Symposium is the premier event uniting global space professionals from all sectors, providing a unique platform to explore critical space issues, foster dialogue, and drive innovation across the space industry.

Adapt 2026: Signal Over Noise (New York, New York, USA, Apr 15, 2026) Adapt26 isn't your typical corporate conference. Built for security, IT, and risk leaders, this is where you learn to cut operational drag and move from overwhelming findings to focused remediation. When 56% of teams struggle to prioritize effectively, visibility alone isn't enough. You need durable context - a verifiable foundation that turns disconnected data into decision-grade security. Join the teams building a more resilient cyber future to learn how to secure your entire distributed footprint across IT, Cloud, and IoT/OT.

Philadelphia Cybersecurity Summit (Philadelphia, PA, Apr 15, 2026) Maximize your networking opportunities by meeting with fellow industry executives and leading security experts at the upcoming 9th Annual Philadelphia Official Cybersecurity Summit on Wednesday, April 15, 2026. Secure your admission now! Use Code CSS26-CRA before February 18 for Free Admission.*

CyberArk IMPACT 2026 (Austin, Texas, USA, May 11 - 13, 2026) At CyberArk IMPACT, cybersecurity practitioners and leaders will come together to explore today’s #1 attack vector – identity. Attendees will acquire a deep understanding of the latest developments in identity-based cyberattacks, including sophisticated attacker techniques that leverage AI and other methods. And most importantly, they will learn how to shut out attackers and prevent unauthorized access by securing every identity across the organization with the right level of privilege controls.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 04.14.26

Top stories.

France continues its move toward digital sovereignty.

Adobe fixes zero-day flaw in Acrobat Reader.

Triad Nexus cybercrime network shifts focus toward emerging markets.

Notes.

Attacks, Threats, and Vulnerabilities

Litigation, Investigation, and Law Enforcement

Events