The 17 April roundup covers: ENISA’s 2026 Cybersecurity Certification Conference on 15 April; the UK FCA consultation on crypto trading, safeguarding and staking regulation ahead of an October 2027 regime; a Northern Ireland arrest of a 16-year-old over the C2k school network breach; and Europol’s Operation PowerOFF DDoS-for-hire takedown. The edition also carries the APT28/Roundcube confirmation and the Booking.com breach notice.