Minister David van Weel of Justice and Security has made it clear in a firm response that digital security at the Public Prosecution Service (OM) must improve drastically. He states that a significant catch-up effort is required to bring information security up to the necessary level. These statements follow the painful conclusions of an independent […]
The information security of the IT systems of the Public Prosecution Service (OM) was insufficient for years, an independent commission of inquiry has concluded. This structural vulnerability resulted in a serious cyber breach in July 2025. The attackers managed to infiltrate by successfully exploiting a vulnerability in internet-facing Citrix NetScaler systems. Because the OM had […]
Medical records, dates of birth, and in some cases, citizen service numbers (BSN) from the Klein Iterson practice in Gouda have been published online. The attack has been claimed by the ransomware group LockBit 5.0. Patients are being warned about potential identity fraud and phishing attacks. Read the huisartsencentrumkleiniterson.nl article for more information.
The Financial Stability Board (FSB) currently identifies the impact of advanced AI on cyber risk as the most urgent threat to global financial stability. Frontier AI can drastically change the speed, scale, and cost of cyberattacks, allowing vulnerabilities to be discovered and exploited more rapidly. At the same time, the dependence on only a few […]
Phocuswright sees that the EU Digital Identity Wallet is gaining ground, but adoption differs strongly between France, Germany, and the UK. Awareness is growing, France leads with 25%, while Germany shows the largest increase from 13% to 21%. Trust is decisive: 54% of Germans trust the Personalausweis, while trust in digital identity systems is clearly […]
A new study maps 21 open-source AI risk tools against 32 risk categories, including Promptfoo, Garak, PyRIT, NeMo Guardrails and Langfuse. The ecosystem performs particularly well in AI testing, red teaming, content safety, data governance and post-deployment monitoring. But major gaps remain in board oversight, regulatory compliance, legal remedies and financial/market controls, areas software alone […]
Google’s synchronized passkeys have proven vulnerable to malware that can take over accounts without a PIN, biometrics, or user interaction. Researchers from Palo Alto Unit 42 demonstrated three attacks, including the theft of the secret key used to decrypt all synchronized passkeys. Additionally, some online services blindly relied on the ‘User Verified’ flag without actually […]
With Implementing Regulation (EU) 2026/1731, the European Commission has further elaborated the technical specifications for the European Digital Identity Wallet (EUDI Wallet). This shifts the focus from vision to the actual implementation of eIDAS 2.0. The wallet is merely the visible component of a much broader European trust infrastructure. This infrastructure relies on Qualified Trust […]
The European Commission has published official guidelines for the application of the Cyber Resilience Act (CRA), helping manufacturers, suppliers, and open-source projects better understand how the law should be applied in practice. The guidance clarifies when software, hardware, and combinations thereof fall under the CRA and when software is considered to be “placed on the […]
The European Union Agency for Cybersecurity (ENISA) has released a practical Cyber Resilience Maturity Assessment Model to help SMEs prepare for the Cyber Resilience Act (CRA) before it becomes fully applicable in December 2027. The model focuses on five key domains: governance, secure-by-design risk management, vulnerability & patch management, product lifecycle management, and cybersecurity skills. […]