Cybersecurity Updates: Ransomware Blocked at Ecopetrol, WordPress Exploit, EY Breach - July 19, 2026

Key points

• •Ecopetrol successfully blocked a ransomware attack in July 2026, demonstrating the persistent threat ransomware poses to critical energy infrastructure and the importance of preparedness in the sector.[GuruFocus]
• •The public release of a working exploit for the WordPress core vulnerability CVE-2026-63030 on GitHub on July 19, 2026, significantly increases the risk of rapid exploitation, pushing website administrators to urgently patch affected systems.[Reddit /r/netsec]
• •Major data breaches occurred at Ernst & Young (EY) due to hackers compromising their third-party IT support system, leading to exposure of sensitive client tax and financial information, highlighting risks associated with third-party security dependencies.[CyberSecurityNews]
• •The White House launched the Gold Eagle initiative in July 2026 to unify AI-driven cybersecurity efforts protecting critical U.S. infrastructure, reflecting growing governmental focus on integrating artificial intelligence for enhanced national security.[Межа. Новини України.]
• •F5 addressed a critical remote code execution vulnerability (CVE-2026-42533) in NGINX software on July 15, 2026, which could cause worker crashes and unauthorized code execution, underscoring the need to keep widely used internet infrastructure software updated.[The Hacker News RSS]
• •A federal audit released on July 19, 2026, revealed substantial gaps in cybersecurity oversight in the U.S. aviation sector, potentially increasing susceptibility to cyberattacks that could threaten safety and operational integrity.[Biometric Update]
• •A $3 million theft from Polymarket occurred due to a software supply chain security failure reported in July 2026, highlighting the increasing risks and financial impact of vulnerabilities in software supply chains.[Cybersecurity Insiders]
• •SonicWall SMA 1000 series VPN appliances were targeted by attackers exploiting zero-day vulnerabilities prior to their disclosure in June 2026, allowing unauthorized root access and exemplifying the danger of unpatched enterprise cybersecurity appliances.[The Hacker News]
• •State-sponsored Russian cyber actors exploited ClickFix CAPTCHA techniques to deliver malware to Ukrainian devices as of July 2026, illustrating ongoing geopolitical cyber warfare tactics using social engineering mechanisms.[The Hacker News RSS]
• •Salt Lake City adopted a $5 million cybersecurity insurance policy by mid-July 2026 due to rising hacking attempts, showcasing municipal-level investment in financial risk mitigation amidst increasing cyber threats.[North Country Now]

Relevant articles