Inicio | INCIBE

Detection of unauthorised access to Origin Energy customer data

Posted date 30/07/2026

During July 2026, Origin Energy detected signs of a possible cybersecurity incident involving unauthorised access to customer information. The company...

Etiquetas

Chain of Critical Vulnerabilities in WordPress, wp2shell

Posted date 28/07/2026

In mid-July 2026, a chain of critical vulnerabilities affecting the WordPress core was made public, subsequently dubbed ‘wp2shell’. The incident...

Etiquetas

Investigation into the leak of personal data belonging to members of sensitive state institutions

Posted date 23/07/2026

During the first few months of 2026, the Spanish authorities detected an unauthorised campaign to disseminate confidential information that affected...

Etiquetas

Cybersecurity incident involving unauthorised access to ElParking customer data

Posted date 14/07/2026

The cybersecurity incident took place on 14 June 2026, when ElParking, a service within the Mutua Madrileña Group, detected unauthorised access to...

Etiquetas

Investigation into a possible data breach relating to Leroy Merlin’s Hogami

Posted date 09/07/2026

In late June 2026, Leroy Merlin Spain announced that it was investigating a security incident relating to Hogami, its platform for installation...

Etiquetas

Vulnerability in iPhones with A12 and A13 processors

Posted date 07/07/2026

In June 2026, a cybersecurity discovery affecting certain iPhone models equipped with A12 and A13 processors was made public. The incident occurred...

Etiquetas

Operation Endgame disrupts the Amadey, StealC and SocGholish malware networks

Posted date 02/07/2026

At the end of June 2026, a new phase of Operation Endgame was announced; this is an international initiative aimed at dismantling infrastructure used...

Etiquetas

Assessment of vulnerabilities in US classified systems using artificial intelligence

Posted date 30/06/2026

During the second half of June 2026, as part of an authorised cybersecurity assessment exercise carried out by US government agencies, it emerged that...

Etiquetas

Detection and correction of critical vulnerability in the Avada Builder plugin for WordPress

Posted date 25/06/2026

In mid-May, a critical vulnerability was identified and addressed that compromised the integrity of the infrastructure of websites using a specific...

Etiquetas

Exposure of credentials on Fortinet devices linked to the exploitation of SSL-VPN

Posted date 22/06/2026

An extensive list of credentials linked to Fortinet devices – particularly FortiGate and SSL-VPN environments exposed to the internet, has recently...

Subscribe to