News
-
Netherlands funds small-business cyber controls
The Netherlands is reopening a €1 million cyber-resilience subsidy that will cover half the cost of selected security measures for qualifying small businesses and sole traders.
-
Kali365 abuses Microsoft authentication for account access
Kali365 phishing campaigns are abusing legitimate Microsoft authentication processes to obtain sessions and tokens, reducing the value of familiar warning signs around fake login pages and password theft.
-
CREST accredits first AI-enabled penetration-testing providers
CREST has accredited its first ten AI-enabled penetration-testing providers, creating an assurance framework around how artificial intelligence is governed inside professional security testing services.
-
GeoNetwork flaws expose government geoportal backends
Two GeoNetwork vulnerabilities can be chained for unauthenticated remote code execution, with researchers reporting vulnerable internet-facing deployments across government-heavy geospatial infrastructure.
-
Link11 sees fewer but heavier DDoS attacks
Link11 recorded fewer DDoS attacks against its European customer network in early 2026, but peak bandwidth, packet rates, and cumulative attack traffic all increased sharply.
-
G7 urges faster post-quantum migration
G7 cyber authorities are pressing public and private organisations to accelerate post-quantum migration as European policymakers move from broad timelines towards implementation and prioritisation.
-
Pegasus found on Serbian protest activist’s iPhone
Citizen Lab has forensically confirmed Pegasus spyware on a Serbian student activist’s iPhone after an iMessage zero-click attack, while the identity of the operator remains unknown.
-
Dustin shuts systems after unauthorised access
Nordic IT supplier Dustin has shut parts of its internal environment after detecting unauthorised access, with the scope of the incident and any data exposure still under investigation.
-
Public exploit raises Cleo Harmony exposure
Exploit material has been published for a newly disclosed Cleo Harmony authentication weakness, increasing exposure around a managed-file-transfer platform with a history of criminal targeting.
-
SonicWall confirms SMA1000 zero-days under attack
SonicWall says two vulnerabilities affecting SMA1000 secure-access appliances are being actively exploited, including a critical pre-authentication SSRF flaw and a post-authentication code-execution weakness.