Cyber Toolkit Ltd, a UK Registered Company - 16938415
This is the Cyber Toolkit weekly roundup of key cyber security news, covering the most relevant vulnerabilities, breaches and incidents affecting organisations in the UK and beyond over the past week (21st July – 28th July 2026).
Estée Lauder disclosed a data breach after attackers exploited a vulnerability within Oracle E-Business Suite to gain unauthorised access to company systems. Organisations using Oracle E-Business Suite should ensure all available patches have been applied, review systems for indicators of compromise and monitor privileged accounts for suspicious activity.
Security researchers are warning that a critical vulnerability affecting Palo Alto Networks GlobalProtect VPN gateways is now being actively exploited by ransomware groups. Successful exploitation allows attackers to gain initial access to corporate networks, providing a pathway for ransomware deployment. Organisations using affected GlobalProtect appliances should prioritise applying security updates immediately, restrict exposure of internet-facing VPN infrastructure where possible and review authentication logs for any signs of unauthorised access.
Chick-fil-A confirmed a data breach after attackers used credential stuffing attacks against customer accounts, exploiting usernames and passwords previously exposed in unrelated breaches. The incident serves as another reminder that password reuse continues to present a significant risk for both organisations and customers.
The UK Government's latest National Risk Register has once again identified cyber attacks as one of the country's highest national security risks, warning that large-scale ransomware attacks and disruption to critical national infrastructure remain realistic threats. The report reinforces the growing importance of cyber resilience across both the public and private sectors, highlighting the need for organisations to maintain robust incident response plans, regular backups and effective vulnerability management.
Swiss rail manufacturer Stadler confirmed it had rejected a £123 million ransomware demand following a cyber attack, refusing to negotiate with the attackers despite the theft of company data. The incident reflects the continued trend of double-extortion ransomware operations, where criminals seek to pressure organisations by threatening to publish stolen information. Organisations should ensure sensitive data is appropriately segmented and encrypted, maintain offline backups and regularly test incident response procedures to minimise operational disruption following an attack.
Check Point has released emergency security updates after attackers were found actively exploiting a critical vulnerability affecting Security Gateway appliances. The flaw could allow unauthenticated remote code execution, making internet-facing firewalls an attractive target for threat actors seeking initial network access. Organisations running affected Check Point products should apply the latest patches without delay, verify appliance integrity and monitor network traffic for signs of attempted exploitation.
Australian energy provider Origin disclosed a data breach that exposed customer information following unauthorised access to its systems. While there is currently no indication that operational energy infrastructure was impacted, the incident demonstrates the continued targeting of organisations operating within critical infrastructure sectors. Organisations should review third-party access controls, strengthen identity protections and ensure sensitive customer data is adequately protected against unauthorised access.
This week, Cyber Toolkit demonstrated its pivotal role by issuing 128 technical alerts, enabling organisations to stay ahead of emerging threats and respond promptly. Furthermore, our system identified 57 critical vulnerabilities across various systems. These figures highlight the importance of proactive measures and, as cyber threats continue to evolve, it is crucial for organisations to stay vigilant and utilise effective and FREE tools like Cyber Toolkit to manage their cyber security risks.
We'll see what next week brings.