News
-
EU defence officials resist cloud sovereignty rules
European defence officials are pushing back against parts of the EU’s proposed cloud sovereignty regime, warning that strict restrictions on non-European providers could undermine military capability and interoperability.
-
MEPs seek Serbia consequences over spyware
Twenty-nine European lawmakers are pressing Brussels to slow Serbia’s EU accession and freeze some funding after researchers documented a major wave of spyware targeting political and civil-society figures.
-
MikroTik flaws exploited against internet-facing routers
CERT Polska has disclosed six RouterOS vulnerabilities and confirmed active attacks using a two-flaw chain to take control of MikroTik devices exposed over SSH.
-
French hospital fined €500,000 after data breach
France’s privacy regulator has fined Hôpital Privé de la Loire after finding weak authentication, excessive access, and inadequate monitoring contributed to a major patient-data breach.
-
Berlin centralises response after stolen data published
Berlin has created a central unit to assess stolen government data after files taken in its recent cyberattack were published following an unsuccessful extortion attempt.
-
Cisco Nexus flaw enables remote root access
Cisco has patched a critical Nexus 9000 vulnerability that can allow an unauthenticated remote attacker to execute code with root privileges on affected Silicon One-based switches.
-
VMware flaws can cross virtual-machine boundary
Broadcom has patched two VMware Workstation and Fusion vulnerabilities that can allow an attacker with administrative control inside a virtual machine to execute code on the host.
-
France and Netherlands press cloud sovereignty
France and the Netherlands are calling for European procurement criteria and stronger cloud-sovereignty protections as the EU prepares a new package of technology and cybersecurity rules.
-
Netherlands funds small-business cyber controls
The Netherlands is reopening a €1 million cyber-resilience subsidy that will cover half the cost of selected security measures for qualifying small businesses and sole traders.
-
Kali365 abuses Microsoft authentication for account access
Kali365 phishing campaigns are abusing legitimate Microsoft authentication processes to obtain sessions and tokens, reducing the value of familiar warning signs around fake login pages and password theft.