Inicio | INCIBE

BigBear 2.0: Phishing Campaign Targeting Microsoft 365 Accounts

Posted date 17/09/2026

The campaign was discovered by CloudSEK in June 2026, although its exact start date has not been publicly established. The documented activity...

International operation to disrupt the Sality botnet’s infrastructure

Posted date 10/09/2026

On 31 August 2026, an international operation was carried out targeting the infrastructure of the Sality botnet, a peer-to-peer network used for over...

Etiquetas

Unauthorised access to Dropbox accounts via a Lenovo ID integration

Posted date 08/09/2026

Between 4 and 21 August 2026, unauthorised access to Dropbox accounts occurred via the authentication mechanism associated with Lenovo ID. Dropbox...

Etiquetas

Security incident involving OpenAI’s AI agents targeting Hugging Face

Posted date 03/09/2026

In July 2026, as part of OpenAI’s internal cybersecurity capability assessments, several of the company’s model-based agents managed to bypass the...

Etiquetas

Non-interactive attacks against WhatsApp accounts on iPhones running iOS 16

Posted date 28/08/2026

During May 2026, several cases were identified in Italy involving WhatsApp accounts being used without authorisation on iPhone devices running various...

Etiquetas

Ransomware incident at Fairlife, a subsidiary of Coca-Cola

Posted date 26/08/2026

In mid-July 2026, The Coca-Cola Company detected a cybersecurity incident that affected the IT systems of its subsidiary Fairlife, which specialises...

Etiquetas

Detection of unauthorised access to Origin Energy customer data

Posted date 30/07/2026

During July 2026, Origin Energy detected signs of a possible cybersecurity incident involving unauthorised access to customer information. The company...

Etiquetas

Chain of Critical Vulnerabilities in WordPress, wp2shell

Posted date 28/07/2026

In mid-July 2026, a chain of critical vulnerabilities affecting the WordPress core was made public, subsequently dubbed ‘wp2shell’. The incident...

Etiquetas

Investigation into the leak of personal data belonging to members of sensitive state institutions

Posted date 23/07/2026

During the first few months of 2026, the Spanish authorities detected an unauthorised campaign to disseminate confidential information that affected...

Etiquetas