This Month in Security with Tony Anscombe – April 2026 Edition

Why It Matters

These developments signal escalating attack vectors across corporate and industrial environments, demanding immediate upgrades to authentication, network segmentation, and incident response. Ignoring them could expose organizations to costly breaches and operational disruptions.

Key Takeaways

• Microsoft warns of Teams help‑desk impersonation scams targeting remote access
• Over 3,900 Rockwell PLCs exposed across U.S. critical‑infrastructure networks
• FBI IC3 reports $21 billion lost to cyber‑enabled crimes in 2025
• Remote‑access scams exploit Teams collaboration tools, increasing credential theft risk
• Critical‑infrastructure firms must segment PLC networks and enforce strict access controls

Pulse Analysis

The rise of Microsoft Teams impersonation scams reflects a broader shift toward exploiting everyday collaboration tools. Attackers pose as help‑desk personnel, leveraging the platform’s built‑in remote‑control features to coax users into granting privileged access. This social‑engineering vector bypasses traditional perimeter defenses, making multi‑factor authentication and real‑time user education essential. Enterprises that have integrated Teams deeply into their workflows must now enforce strict verification protocols and monitor anomalous session requests to curb credential theft.

Industrial control systems are increasingly in the crosshairs of nation‑state‑aligned threat actors, as demonstrated by the Iranian‑linked campaign against Rockwell PLCs. With almost 4,000 devices exposed across critical‑infrastructure networks, the attack surface extends beyond IT to operational technology environments. Segmentation of OT networks, regular firmware patching, and strict access‑control lists are proven mitigations. Moreover, continuous monitoring for unauthorized PLC communications can detect malicious commands before they disrupt physical processes, safeguarding both safety and continuity.

The FBI’s Internet Crime Complaint Center (IC3) reported a staggering $21 billion in losses from cyber‑enabled crimes in 2025, eclipsing the 2024 figure by roughly 15%. The surge is driven by sophisticated ransomware, business‑email compromise, and the very scams highlighted in this month’s roundup. For businesses, the financial impact translates into higher insurance premiums, increased regulatory scrutiny, and the need for robust incident‑response plans. Investing in comprehensive threat‑intelligence feeds and adopting a zero‑trust architecture can reduce exposure and help organizations stay resilient amid escalating cyber threats.