Loading story…
Dark Reading reported on several region-specific cyber-risk themes rather than a single discrete incident. The World Economic Forum’s Global Cybersecurity Outlook 2026 found Latin American and Caribbean organizations have the lowest confidence in their countries’ ability to defend critical infrastructure (13% confident vs. 37% globally), citing under-resourced cyber-resilience and incident-response capabilities as digital infrastructure expands. Separately, a Dark Reading commentary described growing European anxiety about overreliance on US technology and cybersecurity vendors, framing it as a strategic and sovereignty concern rather than a specific breach or vulnerability disclosure.
Australia also opened a national-security review into Chinese-made Yutong electric buses deployed in major cities, following researcher reporting that the vehicles’ connectivity and remote-management features could be abused and that a “kill switch” scenario is a perceived risk in a crisis (the article notes the reality is more complex than the headline framing). A ZDNET leadership piece echoed the broader theme that technology and cybersecurity decisions are increasingly treated as national-security bets, but it is largely strategic guidance and executive commentary rather than actionable threat intelligence.
See the actors and campaigns active against you right now.
11 events from the most recent confirmed update back to the earliest known activity.
Dark Reading, citing Check Point, reported that African organizations averaged about 2,700 cyberattacks per week in Q1 2026, down 22% from nearly 3,500 per week a year earlier. The report said attacker focus had shifted toward other regions, especially Latin America, which had overtaken Africa as the most targeted region by the end of 2025.
A Cyfirma report described Malaysia as facing a major structural shift in cyber threats as digitization in critical sectors outpaced defenses, increasing exposure to state-backed espionage and financially motivated cybercrime. The assessment highlighted China-linked groups including APT41 and Mustang Panda, financially motivated actors such as Lazarus Group and FIN7, phishing-driven fraud accounting for up to 75% of incidents by late 2025, and emerging deepfake and large-scale DDoS risks.
Australia's government began reviewing potential national security risks posed by Chinese-made Yutong electric buses operating in major cities, focusing on remote connectivity and possible remote shutdown scenarios.
The World Economic Forum's Global Cybersecurity Outlook 2026 reported that Latin America and the Caribbean had the lowest confidence of any region in national ability to defend critical infrastructure, highlighting cyber inequity and talent shortages.
Reports that Microsoft blocked the ICC Chief Prosecutor's email account following US sanctions further eroded European trust in reliance on US technology providers.
Check Point Research data cited in the reporting found that Latin America experienced a 53% year-over-year increase in cyberattacks in 2025, outpacing the global average.
In December 2025, the UK government awarded Palantir a major Ministry of Defence contract despite broader debate over dependence on US technology suppliers.
Major US technology CEOs attending President Trump's January 2025 inauguration were cited as reinforcing European perceptions of political alignment between US government power and large American tech firms.
The 2018 US CLOUD Act intensified European fears that US authorities could compel American technology companies to provide access to data stored outside the United States.
China's 2017 cybersecurity and national intelligence laws heightened foreign government concern that Chinese technology vendors could be compelled to assist state intelligence or security operations.
A 2013 legal dispute over a US warrant seeking access to emails stored in Ireland became an early flashpoint for European concerns about US jurisdiction over data held by American cloud providers abroad.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
5 references tracked. Mallory keeps watching after this page renders.
darkreading.com
Open sourcescworld.com
Open sourcedarkreading.com
Open sourcedarkreading.com
Open sourcedarkreading.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Latvia’s National Security Service (SAB) reported that **2025 saw a record high in registered cyber threats** targeting the country, with **Russia** assessed as the primary source of cyber risk amid Latvia’s support for Ukraine. SAB said most activity was linked to cybercrime and digital fraud, but the most serious cases included **intrusion attempts, malware distribution, equipment compromise, and DDoS attacks**, and it warned that **operational technology (OT)** in energy, water, and transport often lacks sufficient protections. The agency also noted that Russian-linked hacktivist activity has shown willingness and capability to target industrial control systems for short-term disruption and intimidation, and that DDoS activity against government and critical services often aligns with politically sensitive events. In the UK, senior national security figures warned Parliament that resilience alone may be insufficient against **cyber and hybrid threats** (including sabotage and disinformation), arguing the country needs an **offensive deterrence** component to impose costs on hostile states rather than “absorbing” attacks. Separately, Check Point Research data cited by Dark Reading indicated **Latin America and the Caribbean** experienced the highest average weekly attack volume globally (3,065 attacks per week; **+26% YoY**), with prevalent activity including **information disclosure**, attempts at **remote code execution** and **authentication bypass**, and a shift toward **data-leak extortion**, credential theft, and **edge-device exploitation**; the report also projected continued ransomware growth, particularly affecting healthcare and manufacturing.
Jun 29, 2026
Reporting highlighted how **geopolitical competition is increasingly expressed through cyber operations**, with particular concern around disruption of **critical infrastructure**. One account described a U.S. cyber operation that reportedly **blacked out Caracas** and interfered with Venezuelan air-defense radar as part of an operation that led to **Nicolás Maduro’s capture**, portraying it as a rare, public-facing demonstration of offensive cyber capability and precision effects. Separate reporting framed these developments in a broader pattern of state-linked activity and infrastructure exposure, citing prior power-grid disruption in Ukraine and reporting that Russian hackers briefly took control of a Norwegian dam floodgate, underscoring the potential for cyber activity to create real-world safety and continuity impacts. Other items in the set were forward-looking risk commentary rather than reporting on the same event. A Palo Alto Networks study warned that the **Milan Cortina Winter Olympics** will be a “target-rich” environment for ransomware, fraud, DDoS, phishing, and intelligence collection due to temporary networks and complex third-party dependencies. Additional pieces focused on generalized 2026 risk themes—**cyber risk and AI** in business surveys, **zero trust** project planning, regional CISO predictions about identity and cloud/AI security, and a resilience opinion column drawing parallels to disaster recovery—useful context, but not specific to the Venezuela operation or a single discrete incident.
Jun 29, 2026
Recent cybersecurity news covers a wide range of topics, including the evolving threat landscape, regulatory changes, and the persistent risks associated with misconfigurations and legacy systems. Notable highlights include urgent warnings from CISA and other agencies about the Akira ransomware's new, faster variant targeting critical infrastructure, and the release of the updated OWASP Top 10 Web Application Risks for 2025, which now includes "software supply chain failures" as a key concern. Additionally, Microsoft Exchange servers face heightened risk due to the end of support for Exchange 2016 and 2019, with CISA and NSA urging organizations to follow best practices to mitigate imminent threats. In Brazil, banking Trojans such as Coyote and Maverick are actively targeting users, particularly through WhatsApp, resulting in hundreds of organizations being affected. On the regulatory front, the UK has introduced a new Cyber Security and Resilience Bill to strengthen protections for critical sectors, mandating rapid incident reporting and imposing significant penalties for non-compliance. Kenya has launched the "Code Nation" initiative to train over a million tech workers, including cybersecurity specialists, as part of its digital transformation. Meanwhile, industry commentary highlights the growing risks of misconfigurations in platforms like Salesforce, the challenges posed by non-human and AI identities, and the ongoing debate over privacy and surveillance in the EU. These developments underscore the complexity and interconnectedness of today's cybersecurity environment, with organizations urged to stay vigilant and adapt to rapidly changing threats and regulations.
Jun 29, 2026