IP-camera security against spying
Russian state actors—along with hacktivists and criminals—abuse IP cameras for spying and attacks. Discover practical steps for organizations and home users.
Latest alerts
RSS feed
House of Cyber: Dora Horjus als programmamanager
Dora Horjus is per 1 juli benoemd als programmamanager bij NCSC. In die rol stuurt ze bestuurlijke samenwerking én de weg naar een fysiek House of Cyber rond 2030.
Office Update Alert: Patch Urgent Microsoft Office Flaws
A new Office update alert warns of multiple Microsoft Office vulnerabilities across Word, Excel, PowerPoint, and SharePoint. One SharePoint flaw is actively exploited, so installing updates fast is critical.
Severe WordPress Core vulnerabilities: install updates
The NCSC reports severe WordPress Core vulnerabilities that have already been exploited. If you run WordPress, install the security updates as soon as possible.
Critical Oracle Fusion Middleware vulnerabilities: act now
The NCSC reports multiple critical vulnerabilities in Oracle Fusion Middleware components. Because they can be exploited remotely without authentication, organizations should install Oracle security updates immediately.
GoSerpent backdoor: Southeast Asia data theft chain
The GoSerpent backdoor campaign targeted government and diplomatic entities in Southeast Asia, combining stealthy remote access with staged credential dumping and file exfiltration.
BitLocker extortion through printers: what changed
Two recent incidents in Latin America show a new extortion pattern: attackers encrypt disks with BitLocker and trigger ransom notes via office printers. The cases also reveal recurring misuse of RDP, MSSQL misconfigurations, and RMM tools.
GenieLocker ransomware: custom-made for multiple systems
GenieLocker ransomware has been active since March 2026 and targets victims across multiple sectors. It runs on Windows, Linux and ESXi and uses a custom encryption mechanism.
Focus: OctLurk and SilkLurk backdoors (Central Asia)
In Central Asia, since January 2025, two new backdoors have been observed: OctLurk and SilkLurk. The attackers use customized loaders, heavy obfuscation, and additional functionality via plug-ins and LurkProxy.
Rapid7 PoC Released for SmartConsole Auth Bypass
Rapid7 has published a Python PoC to test for CVE-2026-16232. This SmartConsole auth bypass lets attackers obtain an admin login token if the setup allows unauthenticated access.