AI is transforming software supply chain risks: attacks are now primarily targeting developer workflows and open-source repositories, while threats surrounding model weights, vector stores, and MCP servers remain largely experimental. Attackers are even exploiting package names hallucinated by generative AI by registering them as malicious packages, which AI agents may then install automatically. According to […]
New research from Black Kite shows that attackers primarily exploit internet-exposed systems, stolen credentials, and vulnerabilities in supply chains. More than half of the mid-market victims studied had revenues between $10 and $50 million; manufacturing is the hardest hit. Read the Helpnetsecurity.com article for more information.
Research into 461 ransomware incidents and 237 negotiations shows that technical resilience is more important than negotiation tactics. Victims with fully recoverable backups negotiate and pay significantly less often. Payment was made in only 18.3% of incidents without communication, compared to 66.7% when victims actually engaged in negotiations. An offered discount increases the probability of […]
Microsoft confirms that CVE-2026-69836, a critical RCE vulnerability in Entra ID, has been actively exploited by attackers. The flaw enabled remote code execution without authentication or user interaction via insecure deserialization. As Entra ID is central to Microsoft 365, Azure, and SSO, exploitation could potentially grant access to tokens, policies, and linked cloud environments. Microsoft […]
Security researchers uncovered severe vulnerabilities in Belgium’s Connective eID signing software, used by more than 2 million citizens. The technology is deployed by 8 of Belgium’s 10 largest banks, more than 60 government agencies and over 1,000 enterprises. A fundamental weakness was that the software failed to properly verify which website was communicating with the […]
Governments must approach IT procurement differently: with less focus on standard software and more on open standards and open source. Large-scale standard solutions often lead to overcapacity, high licensing costs, and strong vendor dependency. Open standards improve interoperability and flexibility, while open source enables greater control over software and further development. Strategic autonomy requires professional […]
With eIDAS 2.0, customers can prove their identity using reliable digital credentials without repeatedly uploading identity documents.ID Control helps organizations transition to wallet-based verification: collecting fewer personal data points, faster onboarding, and enhanced privacy and security, including consultancy and training.
U.S. security agencies warn of active cyber threats targeting Siemens S7 PLCs, used across energy, water, manufacturing, and other critical infrastructure. Attackers are leveraging AI-generated exploits and internet scanning to identify and target exposed or poorly secured industrial control systems. AI makes ICS attacks faster and more accessible, reducing the level of specialized OT expertise […]
AI is significantly accelerating software development: thanks to AI, 82% of developers spend less time writing code. However, QA is lagging behind, as parallel-developed AI features cause conflicts, changing test data, and inconsistent test environments. Tests involving more than four features simultaneously quickly prove to be less reliable, making phased testing increasingly important. Organizations must […]
The Cybersecurity Act implements NIS2, but according to the author, it aligns too closely with existing sectoral structures instead of achieving true harmonisation. Especially now that digital threats, ransomware, and supply chain risks are increasing, collective European cyber resilience is essential. NIS2 should not be adapted to the Dutch status quo; instead, organisations and regulations […]