CSIRT-CAN – Centro de Respuesta a Incidentes de Seguridad de Canarias

JULY NEWSLETTER

📨During the month of July, we continued bringing you more informative content, events, analyses, and much more. So, here we go with the highlights from the past thirty days, brought t o you by your trusted CSIRT.

Separation line

📰News + Analysis

➡️ We analyze the Cyber Resilience Act (CRA – EU Regulation 2024/2847), which requires products with digital elements to be secure by design. We break down its key provisions and explain why your organization should already be assessing its impact.

🌐Official website | LinkedIn | 𝕏 (X)

Separation line


📨Awareness

➡️We'd like to remind everyone of the importance of protecting their information before going on vacation. Taking a few simple cybersecurity precautions before you disconnect will help you enjoy a more worry-free summer while protecting both your personal information and your organization's data.

🌐Official website | LinkedIn | 𝕏 (X)

➡️We remind everyone of the importance of keeping their web browser up to date to fix security vulnerabilities, improve performance, and ensure compatibility with web applications. We also explain how to check the installed version in the major web browsers.

🌐Official website | LinkedIn | 𝕏 (X)

➡️We share the key recommendations for strengthening mobile device security, highlighting the importance of using secure screen lock methods, keeping the operating system and applications up to date, and downloading apps only from official app stores.

🌐Official website | LinkedIn |𝕏 (X)

➡️We would like to remind you of the importance of protecting yourself against cyber scams during the holidays. Smishing, fake QR codes, and booking fraud increase during the summer; adopting a few simple preventive measures before disconnecting will allow you to enjoy the season with greater peace of mind and will help keep both your personal and banking data safe.

🌐Official website | LinkedIn | 𝕏 (X)

Separation line

👥Social Media

➡️We analyze how cybercriminals are also using artificial intelligence to create more convincing phishing campaigns, deepfakes, and personalized scams. In addition, we share recommendations to help reduce the risk of a cyberattack.

LinkedIn| 𝕏 (X)

➡️We explain the 3-2-1 golden rule for backups and highlight the importance of keeping multiple copies on different storage media, including one offline copy, as well as regularly testing backup restoration to ensure information can be recovered in the event of an incident.

LinkedIn| 𝕏 (X)

➡️We explain how cybercriminals can collect small pieces of publicly shared information to build detailed profiles and launch more convincing and personalized social engineering attacks. We also share practical recommendations to help protect your privacy and reduce the risk of becoming a victim of a cyberattack.

LinkedIn| 𝕏 (X)

➡️IWe informed about the CVE-2026-60137 and CVE-2026-63030 vulnerabilities affecting WordPress Core, whose combined exploitation could allow Remote Code Execution (RCE). We also provided information on the affected versions and the recommended security updates.

LinkedIn| 𝕏 (X)

Separation line

 

🗓️Key Dates

➡️The Cybersecurity Summer BootCamp (second half of July), organized by INCIBE in León, takes place. It is one of Spain's leading international events for cybersecurity professionals, law enforcement agencies, the judicial sector, and industry representatives.

🌐Official website

Separation line

 

The CSIRT-CAN team hopers you have enjoyed this month’s updates.

Best regards, The CSIRT-CAN Team.