North Korean state-sponsored hackers have successfully infected more than 30,000 devices worldwide by posing as legitimate corporate recruiters. The attackers use sophisticated social engineering tactics on professional networking platforms to trick unsuspecting job seekers into downloading malicious files disguised as job descriptions. Once executed, the malware grants the threat actors full remote access to steal […]
Medical records, dates of birth, and in some cases, citizen service numbers (BSN) from the Klein Iterson practice in Gouda have been published online. The attack has been claimed by the ransomware group LockBit 5.0. Patients are being warned about potential identity fraud and phishing attacks. Read the huisartsencentrumkleiniterson.nl article for more information.
Hugging Face disclosed a groundbreaking cyberattack in which an autonomous AI agent independently executed the entire intrusion—from initial compromise to privilege escalation and lateral movement. The attacker exploited vulnerabilities in the dataset-processing pipeline, performing more than 17,000 automated actions over a single weekend without direct human control. Although public models, datasets, and the software supply […]
The AIVD and MIVD warn that Russian state hackers are exploiting vulnerable IP cameras for espionage, including a small number in the Netherlands. The primary recommendations are: disable UPnP, avoid port forwarding, use a VPN, and restrict internet access to the camera. Replace default passwords, install firmware updates, and disable unnecessary protocols such as Telnet […]
Microsoft warns of an active cryptojacking campaign in which AI chatbots lead users to malicious download sites. Attackers are now managing more than 150 fake websites that imitate popular Windows tools such as CrystalDiskInfo, HWMonitor, and DDU. For the first time, it has been publicly established that AI chatbots, alongside search engines, are being exploited […]
The cyberattack on the municipality of Epe did not begin with a software vulnerability, but with a clever ClickFix social engineering attack in which an employee manually activated malware. The attacker subsequently managed to crack an administrator’s password, gaining access to a Kerberos admin ticket. Following this, an emergency account without MFA was also compromised—an […]
Basic-Fit lost the data of 200,000 Dutch members, including personal information and bank details. In total, approximately 1 million members were affected, but no passwords or ID documents were leaked. Booking.com also experienced a hack in which booking and contact details were accessed. Financial data remained secure there, but customers are at risk of phishing […]
The FBI IC3 report shows that cybercrime continues to grow strongly in 2025, with more than 1 million reports. Total damages exceed $20 billion, a historic high. Investment fraud (especially crypto) causes the largest financial losses. Common crimes include phishing, extortion, and identity fraud. The elderly (60+) are particularly vulnerable, losing billions to scams. Ransomware […]
The Dutch software provider ChipSoft is dealing with a ransomware incident. According to the company, customers’ personal data has likely not been affected. For the time being, the attack has no impact on the continuity of healthcare services. ChipSoft took immediate measures to secure systems and limit further damage. Customers remain responsible for any notifications […]
Indirect prompt injection is the most widespread and serious vulnerability in AI agents today, not just a theoretical risk. Research shows attacks can transfer across models and behaviors, revealing a fundamental weakness in how agents interpret context. More capable models aren’t safer, high performance often comes with equally high vulnerability. Attacks are especially dangerous because […]