Critical Zero-Day Exploits Discovered in Joomla Extensions: iCagenda and Balbooa Forms

NewsBy Cristian SantanaJuly 13, 2026

Critical Zero-Day Exploits Discovered in Joomla Extensions: iCagenda and Balbooa Forms Overview of the Vulnerabilities Recent reports by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have raised alarm within the cybersecurity community regarding two severe vulnerabilities affecting popular Joomla extensions: iCagenda and Balbooa Forms. Both vulnerabilities, identified with a maximum severity rating of 10.0…

Brecha de Seguridad: La Maliciosa Liberación de jscrambler 8.14.0 en npm Desata un Infostealer en Rust

NewsBy Cristian SantanaJuly 12, 2026

Brecha de Seguridad: La Maliciosa Liberación de jscrambler 8.14.0 en npm Desata un Infostealer en Rust Introducción a la Vulnerabilidad El 11 de julio de 2026, un incidente de seguridad significativo impactó a los usuarios de la popular herramienta de ofuscación de JavaScript, jscrambler. Se descubrió que la versión 8.14.0 del paquete npm estaba comprometida,…

Security Breach: Malicious jscrambler 8.14.0 npm Release Unleashes Rust Infostealer

NewsBy Cristian SantanaJuly 12, 2026

Security Breach: Malicious jscrambler 8.14.0 npm Release Unleashes Rust Infostealer Introduction to the Vulnerability On July 11, 2026, a significant security incident impacted users of the popular JavaScript obfuscation tool, jscrambler. The npm package’s version 8.14.0 was found to be compromised, prompting immediate concern among developers and cybersecurity experts alike. By merely installing this version,…

Cyber Espionage: Balochistan Police Portal Compromised in Multi-Group Attacks

NewsBy Cristian SantanaJuly 12, 2026

Cyber Espionage: Balochistan Police Portal Compromised in Multi-Group Attacks Background and Context The recent revelations surrounding the cyber espionage campaign targeting the Balochistan Police in Pakistan shed light on the escalating threat landscape in South Asia. Between February 2024 and April 2026, cybersecurity researchers uncovered a sophisticated operation involving suspected threat actors aligned with both…

Nuevo esquema de phishing explota la inscripción de claves de acceso de Microsoft Entra para comprometer cuentas de Microsoft 365

NewsBy Cristian SantanaJuly 11, 2026

Nuevo esquema de phishing explota la inscripción de claves de acceso de Microsoft Entra para comprometer cuentas de Microsoft 365 Descripción General del Ataque Ha surgido una nueva campaña de phishing sofisticada, que apunta a organizaciones de diversos sectores con solicitudes de seguridad fraudulentas que engañan a los usuarios de Microsoft 365 para inscribir nuevas…

New Phishing Scheme Exploits Microsoft Entra Passkey Enrollment to Compromise Microsoft 365 Accounts

NewsBy Cristian SantanaJuly 11, 2026

New Phishing Scheme Exploits Microsoft Entra Passkey Enrollment to Compromise Microsoft 365 Accounts Overview of the Attack A sophisticated new phishing campaign has emerged, targeting organizations across various sectors with fraudulent security requests that deceive Microsoft 365 users into enrolling new Entra passkeys. This tactic, used by a group of threat actors identified as O-UNC-066…

CISA Strengthens Cybersecurity Posture Following Major Credential Leak

NewsBy Cristian SantanaJuly 11, 2026

CISA Strengthens Cybersecurity Posture Following Major Credential Leak Background and Context The Cybersecurity and Infrastructure Security Agency (CISA) has recently come under intense scrutiny following a significant credential leak that occurred in May 2023. This incident, characterized by the exposure of privileged Amazon AWS GovCloud Keys, was labeled as one of the most severe breaches…

Microsoft aborda la crítica vulnerabilidad RoguePlanet en Defender con una actualización de seguridad urgente

NewsBy Cristian SantanaJuly 10, 2026

Microsoft aborda la crítica vulnerabilidad RoguePlanet en Defender con una actualización de seguridad urgente Descripción general de la vulnerabilidad RoguePlanet Microsoft ha lanzado recientemente una actualización de seguridad significativa en respuesta a una vulnerabilidad crítica en su software antivirus Microsoft Defender, denominada RoguePlanet. La falla, rastreada como CVE-2026-50656, se divulgó al público casi un mes…

Microsoft Addresses Critical RoguePlanet Vulnerability in Defender with Urgent Security Update

NewsBy Cristian SantanaJuly 10, 2026

Microsoft Addresses Critical RoguePlanet Vulnerability in Defender with Urgent Security Update Overview of the RoguePlanet Vulnerability Microsoft has recently rolled out a significant security update in response to a critical vulnerability in its Microsoft Defender antivirus software, termed RoguePlanet. The flaw, tracked as CVE-2026-50656, was disclosed to the public nearly a month prior to the…

Latvian Forestry Company Struggles to Recover from Ransomware Attack

NewsBy Cristian SantanaJuly 10, 2026

Latvian Forestry Company Struggles to Recover from Ransomware Attack Background and Context The recent ransomware attack on Latvijas Valsts Mezi (LVM), a state-owned forestry company in Latvia, has sent shockwaves through the nation’s cybersecurity landscape. This incident underscores a troubling trend where state-owned enterprises, often perceived as less vulnerable due to their public sector backing,…