Compromised npm and Python Packages: Action Steps
Supply chain attacks targeting npm and Python packages can expose development environments and organizational networks. Here are the key controls, actions, and prevention steps.
Category: Beveiligingsnieuws
FortiClient EMS CVE-2026-35616: Actie nodig
Er is een zeer ernstige kwetsbaarheid gemeld in Fortinet FortiClient EMS: CVE-2026-35616 (CVSS 9.8). Het advies is om de beveiligingsupdate direct te installeren.
CVE-2026-34621: Adobe Acrobat vulnerability
NCSC warns about CVE-2026-34621 in Adobe Acrobat DC, Acrobat Reader DC, and Acrobat 2024. The flaw has high urgency and is being actively exploited.
Mythos AI: why you must act now
Anthropic’s Mythos AI could make vulnerability detection and exploit chain building much faster. The NCSC urges organizations to shorten reaction times and patch processes now.
Cybersecurity Act: What the Parliament Vote Means
The Dutch House of Representatives has approved the Cybersecurity Act framework based on NIS2, plus the critical entities resilience law. This article explains the impact, next steps, and timelines.
High-Risk CVE in Microsoft System Center (CVE-2026-33825)
Er is een ernstige, actief misbruikte kwetsbaarheid gevonden in Microsoft System Center: CVE-2026-33825 (CVSS 7.8). Installeer de beschikbare beveiligingsupdates zo snel mogelijk.
Critical cPanel WHM vulnerability: CVE-2026-41940
A critical cPanel WHM vulnerability, CVE-2026-41940, can allow unauthorized root-level access via session file manipulation. Install the vendor security updates as soon as possible.
Ivanti Endpoint Manager Mobile: actief misbruik CVE’s
Er is actief misbruik gemeld van ernstige kwetsbaarheden in Ivanti Endpoint Manager Mobile. Het NCSC beoordeelt de kans op misbruik en schade als hoog en adviseert snel te patchen.
Severe SD-WAN controller vulnerability: Cisco updates
A severe SD-WAN controller vulnerability has been disclosed affecting Cisco Catalyst SD-WAN Controller and Manager. Security updates are available, especially if devices are reachable from public networks.
Internet.nl and TLS: improve your website and email
Dutch companies are increasingly adopting modern internet standards for websites and email. With Internet.nl and TLS guidelines, you can pinpoint where there’s still room for improvement.