Ransomware: AiLock named Ferrovial (ES)
1. Executive summary On 15 July 2026, the ransomware operator "AiLock" publicly claimed compromise of Ferrovial, a global infrastructure and mobility operator headquartered in
1. Executive summary On 15 July 2026, the ransomware operator "AiLock" publicly claimed compromise of Ferrovial, a global infrastructure and mobility operator headquartered in
1. Executive summary Kaspersky has published detailed analysis of "OkoBot," a sophisticated, multi-stage malware framework active since at least April 2025 that targets
1. Executive summary Four npm packages in the @asyncapi namespace (@asyncapi/generator@3.3.1, @asyncapi/generator-helpers@1.1.1, @asyncapi/generator-components@0.7.
1. Executive summary CrashStealer is a new macOS infostealer, discovered by Jamf Threat Labs and publicly reported in July 2026, that masquerades as Apple's
1. Executive summary Spanish National Police, supported by Interpol and Europol, dismantled a cybercrime and money-laundering organisation that generated approximately €140 million ($160 million) through
1. Executive summary Microsoft's July 2026 Patch Tuesday addresses a record 622 vulnerabilities across its product ecosystem, including 57 rated critical. Two vulnerabilities — CVE-
1. Executive summary SonicWall has disclosed CVE-2026-15410, a post-authentication code injection vulnerability (CVSS 7.2 HIGH, CWE-94) in the SMA1000 Appliance Management
1. Executive summary SonicWall has disclosed and patched CVE-2026-15409, a CVSS 10.0 CRITICAL server-side request forgery (SSRF) vulnerability (CWE-918) in the
1. Executive summary CVE-2026-56164 is a Missing Authentication for Critical Function vulnerability (CVSS 5.3 MEDIUM) in Microsoft SharePoint Server that allows an unauthorized
1. Executive summary CVE-2026-56155 is an insufficient granularity of access control vulnerability (CWE-1220) in Microsoft Active Directory Federation Services (AD FS) that allows
1. Executive summary On 13 July 2026, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned First VPN Service (1VPNS), its
1. Executive summary Two new phishing kits — Jalisco and OmegaLord — have been discovered targeting Microsoft 365 accounts using techniques that defeat multi-factor authentication (MFA). Jalisco