Archief
Alle berichten
PHP crisis across borders: patches are necessary, but panic?
Two critical PHP vulnerabilities triggered an international patch wave. The attack turns out to be more complex than initially thought, but quick and controlled updates remain necessary.
Finland tackles SMS spoofing: a familiar sender name is not proof
Finland allows operators to block unauthorized SMS sender names or display them as spam. The measure helps, but a familiar name on your screen is not proof of identity.
Estonia is making post-quantum cryptography practical: start by knowing what you are using
Estonia is making the transition to post-quantum cryptography concrete: first inventory algorithms, keys, suppliers, and long-lived data, and then migrate risk-basedly.
Ivanti zero-day: if the secured access gate itself becomes the entrance
CVE-2026-104935 allows commands without prior login on vulnerable Ivanti Connect Secure systems. The patch is urgent, but recovery also requires investigating previous abuse.
Chinese cyber actors are systematically targeting the digital front door
The AIVD, MIVD and NCSC expect more Chinese attacks on firewalls, VPN gateways and other digital access points. What does that mean for organizations, employees and home networks?
Germany considers the threat to defense companies to be high — and humans are part of the chain
Espionage, sabotage, and influence targeting are not limited to heavily secured networks. Employees, suppliers, private accounts, and home devices can form the accessible route.
A photo for quick money could be part of sabotage preparations
The Danish security service PET sees concrete Russian preparations for sabotage against defense companies and suppliers around Ukraine. Ordinary internet users can also unwittingly be used as intermediaries.
De G7 noemt post-quantummigratie nu een bestuurlijke opdracht
Zeven grote economieën vragen overheden en bedrijven om niet langer alleen te experimenteren, maar de overstap gezamenlijk te organiseren.
Lange herstelfrases bleken door zwakke randomness toch raadbaar
Vijf walletapps gebruikten een oude CryptoJS-functie voor beveiligingskritieke willekeur. Aanvallers konden daardoor echte privésleutels terugvinden.
Een hardwarewallet kan veilig offline zijn en toch een zwak geheim maken
Een firmwarefout in COLDCARD verzwakte de generatie van herstelzinnen. Aanvallers hoefden het apparaat niet op afstand over te nemen om fondsen te stelen.