Attackers used vishing via Microsoft Teams to impersonate IT support staff, trick employees into granting remote access, and then deploy Chaos ransomware. Sophos observed fast intrusions, sometimes within 17 hours.
Brinks Home says it detected an intrusion in late July and launched an incident response. Meanwhile, ShinyHunters claims it stole millions of Salesforce and support-chat records and threatens to leak them.
Broadcom has published emergency patches for several VMware products. The updates address, among other things, a VMware critical auth bypass and a flaw that enables VM escapes.
Amazon connected several high-profile NPM supply-chain attacks to North Korean hackers. The report also describes how malicious updates spread and why detection is getting harder.
The Anti Phishing Shield pilot blocked more than two million attempts to access phishing and fraudulent sites. Over 200,000 users opted in to the protection via participating internet providers.
Supply chain attacks targeting npm and Python packages can expose development environments and organizational networks. Here are the key controls, actions, and prevention steps.
Er is een zeer ernstige kwetsbaarheid gemeld in Fortinet FortiClient EMS: CVE-2026-35616 (CVSS 9.8). Het advies is om de beveiligingsupdate direct te installeren.
NCSC warns about CVE-2026-34621 in Adobe Acrobat DC, Acrobat Reader DC, and Acrobat 2024. The flaw has high urgency and is being actively exploited.
Anthropic’s Mythos AI could make vulnerability detection and exploit chain building much faster. The NCSC urges organizations to shorten reaction times and patch processes now.
The Dutch House of Representatives has approved the Cybersecurity Act framework based on NIS2, plus the critical entities resilience law. This article explains the impact, next steps, and timelines.
