Cybersecuritymonitor 2025: fewer attacks, wider resilience gap
De Cybersecuritymonitor 2025 toont dat het aandeel bedrijven met een cyberincident daalt. Tegelijk blijft de weerbaarheidskloof tussen grote en kleine organisaties hardnekkig.
Category: Software Supply Chain Security
European Collaboration Strengthens Cross-Border Cyber Resilience
ENSOC brings eight European countries together to improve cross-border cyber resilience. The project supports safer information exchange, faster incident response alignment, and NCSC-led validation work.
Actively Exploited PAN-OS Vulnerability: What to Do
The PAN-OS vulnerability CVE-2026-0257 is being actively exploited, allowing attackers to reach internal systems via VPN when certain configurations are enabled. Update defenses fast and verify your exposure.
Misconfiguration Risks: Open Door to Sensitive Data
Misconfiguration risks don’t require a new software vulnerability. When access is set up incorrectly, attackers can often retrieve sensitive data using legitimate platform features.
NCSC joins Sector Pact for Resilient Energy System
The NCSC has joined the Sector Pact for a resilient energy system. The initiative aims to strengthen resilience through shared knowledge, threat information exchange, clearer roles, and joint exercises.
Urgent: 6 critical Windows vulnerabilities fixed
Microsoft has released security updates for Windows, fixing six severe vulnerabilities. Several can be reached over the network, so installing the patches quickly is strongly recommended.
Ivanti Sentry vulnerability CVE-2026-10523: PoC update
The NCSC reports an update on Ivanti Sentry vulnerability CVE-2026-10523, including a newly published PoC. The guidance: install the vendor updates as soon as possible.
NCSC Community event: risico’s en incidenten beheersen
Tijdens het NCSC Community event in Nieuwegein deelden honderden leden inzichten om risico’s en incidenten beheersen. Twee leerlijnen, scenario-workshops en aandacht voor mens en recht.
WordPress botnet: visitors also affected (NCSC)
The NCSC reports that criminals are abusing WordPress sites via a botnet. Visitors see a fake browser update and may unknowingly install malware or lose login credentials.
FortiBleed: Check if your Fortinet is compromised
FortiBleed Fortinet is a large-scale abuse campaign targeting Fortinet FortiGate and SSL-VPN. Security teams advise checking for known leaked credentials and reviewing logs.