Compliance and Legislation Cybersecurity Defense & Government Incident Response NIS2

When is an IT hack considered legal force majeure?

The court has officially ruled that the notorious Citrix hack at the Public Prosecution Service (OM) was a situation of force majeure. This decision is based on the fact that it involved an unknown zero-day vulnerability that lay entirely outside the organization’s influence and sphere of risk. A crucial element in this ruling was that […]

Hack Incident Response Malware Phishing

North Korean fake recruiters infect over 30,000 devices globally

North Korean state-sponsored hackers have successfully infected more than 30,000 devices worldwide by posing as legitimate corporate recruiters. The attackers use sophisticated social engineering tactics on professional networking platforms to trick unsuspecting job seekers into downloading malicious files disguised as job descriptions. Once executed, the malware grants the threat actors full remote access to steal […]

Compliance Digital Identity Privacy Rights of data subjects

Privacy concerns regarding mandatory digital identification (PDT) for football fans

From the 2028/2029 season, the KNVB intends to make ‘Personal Digital Access’ (PDT) mandatory to more effectively combat ticket abuse in football stadiums. To achieve this, supporters must complete a mandatory one-time digital identification by scanning their identity document via an app. However, recent research raises significant privacy concerns, as an excessive amount of sensitive […]

Defense & Government Privacy Security Surveillance

Police deploy drones to monitor traffic behavior

The national police are increasingly using drones to monitor the traffic behavior of motorists and to enable more targeted enforcement. With these flying cameras, officers can more efficiently supervise dangerous road situations, such as tailgating or smartphone use behind the wheel. While this is intended to benefit overall road safety, the deployment of this aerial […]

AVG Compliance and Legislation Privacy Rights of data subjects

Enschede informs citizens about cameras with facial recognition technology

The municipality of Enschede has published an explanation regarding the policy on the deployment of cameras with facial recognition technology in public spaces. The use of this type of advanced biometric technology inevitably raises critical questions about the protection of citizens’ privacy. Under the strict rules of the General Data Protection Regulation (GDPR), the processing […]

Incident Response Privacy Security

Ministry of Defence investigates whitelist approach for military phones following Polarsteps incident

Follow the Money recently revealed that dozens of Dutch military personnel were traceable in real-time via the location app Polarsteps. These data leaks revealed not only their personal home addresses but also the exact and sensitive locations of barracks and mission areas. The incident bears significant similarities to previous painful security breaches involving the fitness […]

Cybersecurity Hackers Incident Response Security Software Development

Massive supply chain attack via Brevo: Over 100,000 WordPress sites affected

An attacker managed to gain access to the marketing platform Brevo by exploiting a residual Cloudflare API key left in the source code. This was used to deploy a malicious Cloudflare Worker that installed harmful scripts and a backdoor plugin on tens of thousands of WordPress sites. Visitors to the affected websites were subsequently presented […]

Identity & Access Management Incident Response Security

Microsoft Entra ID vulnerability actively exploited in the wild

Microsoft has patched a critical Entra ID vulnerability (CVE-2026-69836) that allows attackers to execute remote code with full system privileges. The company warns that this serious security flaw is already being actively exploited in the wild to gain undetected access to corporate networks. This leak is extremely dangerous, as Entra ID serves as the fundamental […]

Compliance and Legislation Data Protection Privacy Social Media

EU to propose new legislation on Thursday to protect minors

The European Union is preparing to present a new and stringent legislative proposal this coming Thursday aimed at the protection of minors. These new rules are intended to protect children much more effectively against online risks, such as addictive algorithms, harmful content, and privacy violations. The proposal likely builds on existing frameworks such as the […]