Cybersecurity

Identidad, ransomware, Zero Trust, cumplimiento y detección: análisis prácticos de ciberseguridad para empresas.

21 August 2026 · 2-3 min

Apollo Global confirms breach in cloud platforms

Apollo Global Management reported a breach in July where attackers gained unauthorised access to certain cloud platforms and obtained personal information.

8 August 2026 · 2-3 min

The software supply chain demands greater visibility into components and suppliers

Companies seek to identify which libraries and dependencies constitute their applications to react more swiftly to new vulnerabilities.

29 de julio de 2026 · 2-3 min

Post-quantum cryptography begins to enter corporate roadmaps

Although quantum computers capable of breaking current systems are not a general operational reality, migrating cryptography can require years.

27 July 2026 · 2-3 min

World Leaks claims to have published 1.4 TB of data attributed to Nike

Reuters reported that the World Leaks group claimed to have published around 1.4 TB of data attributed to Nike.

27 July 2026 · 2-3 min

Bumble, Match, Crunchbase and Panera appear in a new wave of incidents

Reuters compiled incidents reported by several companies in late January, including Bumble, Match Group, Crunchbase and Panera Bread.

27 July 2026 · 2-3 min

Crunchyroll investigates mass data breach claim

Reuters reported that attackers claimed to have obtained personal data and support records from the streaming platform Crunchyroll.

27 July 2026 · 2-3 min

Hasbro takes systems offline after detecting unauthorised access

Hasbro reported an incident involving unauthorised access to its network.

27 July 2026 · 2-3 min

Rockstar Games exposed by an incident at an analytics provider

Reuters reported that the ShinyHunters group claimed to have obtained Rockstar Games business records following an incident involving an analytics provider.

27 July 2026 · 2-3 min

West Pharmaceutical Services suffers data theft and systems lockout

West Pharmaceutical Services reported a cyberattack that combined data theft and systems lockout, temporarily disrupting manufacturing, logistics, and supply chain operations.

27 de julio de 2026 · 2-3 min

The attack on Canvas affects educational institutions and student data

Instructure, the developer of Canvas, reported an incident affecting platform access and information belonging to educational institutions.

27 July 2026 · 2-3 min

A fake IT team convinces a lawyer to hand over sensitive files

The law firm Blank Rome faced an incident in which attackers posed as the IT department and convinced a lawyer to upload files, exposing personal data of clients and contacts.

27 July 2026 · 2-3 min

Carnival confirms breach initiated via social engineering

Carnival reported that a social engineering campaign compromised an employee account and allowed access to personal information.

27 July 2026 · 2-3 min

Novo Nordisk detects unauthorised copying of information from internal systems

Novo Nordisk reported that unauthorised actors copied information from internal systems, including a limited amount of data linked to clinical trials.

27 July 2026 · 2-3 min

iRhythm suffers extortion following a social engineering attack on third-party applications

iRhythm reported that an actor accessed third-party hosted business applications via social engineering and obtained potentially sensitive information.

27 July 2026 · 2-3 min

AdaptHealth attributes a breach to a contractor's compromised account

AdaptHealth reported that an attacker obtained patient information after compromising a contractor's account with access to cloud applications and management systems via social engineering.

27 July 2026 · 2-3 min

A campaign against Fortinet equipment compromises tens of thousands of systems

Researchers cited by Reuters described a large-scale campaign against Fortinet firewall and VPN devices that allegedly compromised tens of thousands of systems and facilitated credential theft.

27 July 2026 · 2-3 min

fairlife temporarily halts production following unauthorised access

Coca-Cola reported that fairlife had temporarily suspended production operations in the United States after detecting unauthorised access to part of its systems, including production-related systems.

27 July 2026 · 2-3 min

Abbott investigates unauthorised access to oncology diagnostic systems

Abbott reported an investigation into unauthorised access to a limited number of internal systems within its oncology diagnostic business and a potential breach of a specialised portal.

16 July 2026 · 2-3 min

Cyber incident simulations move from theory to the boardroom agenda

Companies test not only technology, but also who decides, who communicates, and how business continues during a crisis.

27 de junio de 2026 · 2-3 min

PAM gains importance in the face of risks from privileged accounts

Administrators, service accounts, and emergency access concentrate enormous power and have become a protection priority.

12 June 2026 · 2-3 min

Deepfakes and business fraud raise the bar for verification

Voice and video are no longer sufficient proof of identity, and companies are strengthening processes for payments and sensitive changes.

7 May 2026 · 2-3 min

Compliance and cybersecurity converge: fewer documents, more evidence

Companies seek to prove that their controls actually work through logs, metrics, and continuous testing.

25 April 2026 · 2-3 min

Artificial Intelligence begins working within the SOC

Security teams are utilising IA assistants to summarise incidents, prioritise alerts and accelerate repetitive tasks.

31 March 2026 · 2-3 min

A compromised Axios library puts the spotlight back on the supply chain

Researchers and Google reported a campaign linked to North Korea that affected software widely used in web applications and introduced malicious code aimed, among other objectives, at credential theft.

29 March 2026 · 2-3 min

APIs establish themselves as one of the critical points of digital security

The digital economy relies on APIs to connect services, but weak authentication or incorrect authorisation can expose data on a massive scale.

27 March 2026 · 2-3 min

The European Commission suffers a cyberattack against Europa.eu cloud infrastructure

The European Commission reported a cyberattack against cloud infrastructure hosting the Europa web platform.

21 March 2026 · 2-3 min

SaaS application security enters the corporate radar

Risk no longer ends at the user's computer: SaaS application configurations, permissions, and integrations require their own vigilance.

11 March 2026 · 2-3 min

A destructive attack disrupts Stryker’s global operations

Stryker reported a cyberattack that caused disruptions and system access limitations.

24 February 2026 · 2-3 min

Wynn Resorts confirms employee data breach

Wynn Resorts reported that an unauthorised third party had obtained employee data.

4 February 2026 · 2-3 min

XDR gains ground as a response to security alert fatigue

Companies seek to correlate signals from devices, identity, email, and the cloud to detect attacks with less noise and more context.

23 January 2026 · 2-3 min

Zero Trust moves beyond the slogan to reach the SME sector

Zero Trust adoption is becoming simpler: fewer giant projects and more specific controls over identity, devices, and data access.

9 January 2026 · 2-3 min

Passkeys are advancing in the enterprise and challenging the traditional password

Phishing-resistant credentials are beginning to establish themselves as an alternative to reduce password theft and access friction.

17 December 2025 · 2-3 min

Shadow AI: the new security challenge facing companies

The uncontrolled use of artificial intelligence tools is beginning to resemble old-school shadow IT, but with new risks concerning data and intellectual property.

29 November 2025 · 2-3 min

Immutable backups: the backup solution gaining prominence against ransomware

Organisations are reviewing their backup systems to prevent an attacker from also being able to encrypt or delete security copies.

18 November 2025 · 2-3 min

Identity becomes the new perimeter of cybersecurity

Hybrid work, SaaS, and the cloud are shifting security from the network towards the digital identity of each user and service.

20 September 2025 · 2-3 min

A cyberattack on Collins Aerospace disrupts European airports

An attack against Collins Aerospace billing and boarding systems caused delays and cancellations at airports such as Heathrow, Brussels and Berlin, affecting software shared by different companies and terminals.

16 September 2025 · 2-3 min

Jaguar Land Rover keeps factories halted for weeks following a cyberattack

Jaguar Land Rover prolonged the production pause at British plants after a cyberattack had forced operations to stop.

26 July 2025 · 2-3 min

Allianz Life suffers a data breach via a third-party cloud CRM

Allianz Life reported that an actor gained access to a third-party cloud CRM through social engineering and obtained personal information from a large portion of its clients, financial professionals, and some employees in the United States.

23 July 2025 · 2-3 min

SharePoint exploitation is also starting to be used to deploy ransomware

Microsoft indicated that some attackers were starting to use SharePoint vulnerabilities to deploy ransomware.

21 July 2025 · 2-3 min

A SharePoint zero-day triggers a global campaign

Researchers identified a campaign against self-managed SharePoint servers that exploited a zero-day vulnerability to gain persistent access.

1 July 2025 · 2-3 min

Qantas confirms access to millions of customers’ data via a third-party provider

Qantas reported that an attacker had accessed a third-party customer service platform used by a call centre.

3 June 2025 · 2-3 min

Victoria's Secret shuts down systems and website during a cybersecurity incident

Victoria's Secret reported an incident that led to the disconnection of corporate systems and the temporary suspension of its website.

23 May 2025 · 2-3 min

Operation Endgame takes down more than 300 servers linked to malware

European, US and Canadian authorities announced a new phase of Operation Endgame with the dismantling of more than 300 servers and new arrest warrants against infrastructure used to distribute malware.

21 May 2025 · 2-3 min

Microsoft and authorities take action against Lumma Stealer

Microsoft announced legal and technical actions against Lumma Stealer, malware dedicated to stealing information from browsers, applications, and wallets.

15 May 2025 · 2-3 min

Coinbase estimates the potential impact of a breach between 180 and 400 million dollars

Coinbase reported that attackers obtained data from a portion of their customers after bribing certain employees and contractors.

14 May 2025 · 2-3 min

Google warns that attackers of British retailers are targeting the United States

Google noted that actors linked to the attacks against British retailers were turning their attention towards US firms and highlighted their use of social engineering techniques.

8 May 2025 · 2-3 min

LockBit appears hacked and exposes part of its internal conversations

The LockBit ransomware group apparently suffered a breach in its own infrastructure.

7 May 2025 · 2-3 min

PowerSchool faces new extortion attempts following educational data breach

PowerSchool reported extortion attempts against school districts following a data breach that occurred in late 2024.

6 May 2025 · 2-3 min

Social engineering against the help desk features at the heart of attacks on British retailers

Reuters reported information pointing to the impersonation of employees at support services to obtain password resets in the Marks & Spencer and Co-op incidents.

1 May 2025 · 2-3 min

Harrods restricts Internet access after detecting intrusion attempts

Harrods reported attempts of unauthorised access to some systems and restricted Internet connectivity at its sites as a preventative measure, just days after the incidents at M&S and Co-op.

30 April 2025 · 2-3 min

Co-op takes systems offline following unauthorised access attempts

The British group Co-op reported unauthorised access attempts and shut down part of its back-office and call-centre systems as a containment measure.

25 April 2025 · 2-3 min

Marks & Spencer suspends online orders following a cyberattack

Marks & Spencer stopped accepting online orders in the UK and Ireland as part of the response to a cyber incident.

18 March 2025 · 2-3 min

Alphabet agrees to buy Wiz for $32,000 million to bolster Google Cloud Security

Alphabet announced the acquisition of Wiz for approximately $32,000 million.

27 February 2025 · 2-3 min

The FBI attributes the $1,500 million theft from Bybit to North Korea

The FBI attributed the theft of approximately 1,500 million dollars in virtual assets from the Bybit platform to actors linked to North Korea.

26 November 2024 · 2-3 min

Blue Yonder suffers ransomware attack affecting clients such as Starbucks

A ransomware attack against Blue Yonder, a supply chain technology provider, caused disruptions at several companies.

19 July 2024 · 2-3 min

CrowdStrike causes a global outage following a faulty update

A CrowdStrike Falcon sensor update caused massive failures in Windows systems, affecting airlines, banks, media, healthcare, and other organisations.

27 June 2024 · 2-3 min

BlackSuit strikes CDK Global, leaving dealerships without their usual tools

Reuters reported that BlackSuit was behind the attack on CDK Global, a software provider used by car dealerships.

4 June 2024 · 2-3 min

Snowflake account attacks impact clients such as Ticketmaster and Santander

SANS compiled research on unauthorised access to Snowflake client environments.

19 April 2024 · 2-3 min

Palo Alto Networks patches zero-day CVE-2024-3400 in PAN-OS

Palo Alto Networks detailed the exploitation of CVE-2024-3400 in specific PAN-OS configurations with GlobalProtect.

30 March 2024 · 2-3 min

XZ Utils reveals open source supply chain risk

Malicious code was discovered in versions 5.6.0 and 5.6.1 of XZ Utils, a widely used utility in Linux systems.

26 February 2024 · 2-3 min

Change Healthcare suffers a ransomware attack with healthcare impact

Reuters reported that BlackCat/ALPHV was behind the outage at Change Healthcare, a technology unit of UnitedHealth.

31 January 2024 · 2-3 min

CISA orders emergency measures due to Ivanti vulnerabilities

CISA issued emergency instructions for organisations using Ivanti Connect Secure and Ivanti Policy Secure following actively exploited vulnerabilities.

19 January 2024 · 2-3 min

Midnight Blizzard accesses Microsoft corporate emails

Microsoft reported that the Russian state-sponsored actor Midnight Blizzard accessed a small number of corporate email accounts.

Next step

¿Quieres aplicar estas mejoras en tu empresa?

Habla con un experto de Seintec y revisamos contigo cómo se aplica a tu infraestructura.

Contactar con Seintec +34 936 940 176