Cyber Conditions 2026 | JULY

More details: https://www.vp.gov.lv/lv/jaunums/viltus-zinu-portals-un-atpazistamas-valsts-amatpersonas-tels-ka-krapnieki-iegust-cilveku-uzticibu-investiciju-shem In July, a fraud scheme was detected where attackers sent misleading emails in the name of the parcel delivery company "Omniva". Recommendations for website owners and users to improve security against "ClickFix" attacks are available here: https://cert.lv/lv/2026/07/clickfix-uzbrukumos-izmanto-viltus-captcha WordPress versions 6.9.x before 6.9.5 and 7.0.x before 7.0.2 contain two critical vulnerabilities (CVE-2026-63030 and CVE-2026-60137), which, when chained, allow an unauthenticated attacker to execute arbitrary SQL queries and perform remote code execution on the server. More details: https://cybersecuritynews.com/7-zip-vulnerability-code-execution/ Three vulnerabilities have been identified in Joomla CMS open-source content management system extensions: Joomla Content Editor (JCE), SP Page Builder, and Page Builder CK. All three vulnerabilities are actively exploited in attacks. Recommendations for mitigating DDoS impacts are available at cert.lv/lv. An attacker with the alias "Bytetobreach," also linked to the June cyber incident and data breach at Latvian State Forests (LVM), publicly announced an attack on Romania’s National Agency for Cadastre and Land Registration in July. To assist Romanian colleagues in understanding the situation and reducing potential threats, CERT.LV shared indicators of the attacker’s infrastructure and other technical information obtained during the LVM incident analysis, which may help in threat investigation and mitigation. More details: https://www.bleepingcomputer.com/news/security/lidl-discloses-online-shop-breach-after-service-provider-hack/ One of the key risks in the Internet of Things environment remains insufficiently protected remote management devices, whose compromise can lead to serious cyber incidents.