Casus: Citrix kwetsbaarheid post, juli 23, 2025 Op deze pagina gaat het NCSC verder in op de situatie omtrent de kwetsbaarheden in Citrix NetScaler ADC en NetScaler Gateway. Ook bieden we extra duiding en handelingsperspectief in het omgaan met deze kwetsbaarheden. Continue Reading
People’s Republic Of China (PRC) Breach US Nuclear Weapons Agency (NNSA) In Historic SharePoint Exploit Attacks post, juli 23, 2025juli 24, 2025 Threat Actors, linked to the People’s Republic of China (PRC) have breached the National Nuclear Security Administration (NNSA) by exploiting a recently patched critical zero-day vulnerability chain in Microsoft SharePoint, a platform commonly used across industries to host internal files and websites. NNSA is the U.S. agency responsible for overseeing… Continue Reading
Openbaar Ministerie bevestigt te zijn gehackt, buit nog onbekend post, juli 22, 2025juli 23, 2025 Het Openbaar Ministerie is daadwerkelijk gehackt. Dat schrijft NRC, die een interne toelichting van directeur Hans Moonen van de ICT-organisatie van het Openbaar Ministerie heeft gezien. Of er informatie is gestolen, en om welke gegevens het dan gaat, is nog niet bekend. Continue Reading
Dior begins sending data breach notifications to U.S. customers post, juli 21, 2025 The House of Dior (Dior) is sending data breach notifications to U.S. customers informing them that a May cybersecurity incident compromised their personal information. Dior is a French luxury fashion house, part of the LVMH (Moët Hennessy Louis Vuitton) group, which is the world’s largest luxury conglomerate. The Dior brand alone… Continue Reading
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks post, juli 21, 2025juli 23, 2025 Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in “ToolShell” attacks. In May, during the Berlin Pwn2Own hacking contest, researchers exploited a zero-day vulnerability chain called “ToolShell,” which enabled them to achieve remote code execution in Microsoft SharePoint. These… Continue Reading
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics post, juli 21, 2025 A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based cryptojacking attacks once popularized by the likes of CoinHive. Although the service has since shuttered after browser makers took steps to ban miner-related apps and add-ons, researchers from the c/side said they found… Continue Reading
PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse post, juli 21, 2025 Cybersecurity researchers have disclosed a novel attack technique that allows threat actors to bypass Fast IDentity Online (FIDO) key protections by deceiving users into approving authentication requests from spoofed company login portals. FIDO keys are hardware- or software-based authenticators designed to eliminate phishing by binding logins to specific domains using… Continue Reading
Global hack on Microsoft product hits U.S., state agencies, researchers say post, juli 20, 2025juli 21, 2025 Unknown attackers exploited a “significant vulnerability” in Microsoft’s SharePoint collaboration software, hitting targets around the world. Hackers exploited a major security flaw in widely used Microsoft server software to launch a global attack on government agencies and businesses in the past few days, breaching U.S. federal and state agencies, universities,… Continue Reading
National Guard hacked by Chinese ‘Salt Typhoon’ campaign for nearly a year, DHS memo says post, juli 15, 2025juli 24, 2025 An elite Chinese cyberspy group hacked at least one state’s National Guard network for nearly a year, the Department of Defense has found. The hackers, already responsible for one of the most expansive cyberespionage campaigns against the U.S. to date, are alleged to have burrowed even further than previously known… Continue Reading
Israel Says Iran Is Hacking Security Cameras for Spying post, juli 11, 2025 Israeli officials said this week that Iran is compromising private security cameras around Israel to conduct espionage as the two countries exchange missile strikes after an initial Israeli barrage. A former Israeli cybersecurity official warned on public radio this week that Israelis should confirm that their home security cameras are… Continue Reading