Starting September 7, 2026, self-employed professionals and small businesses can receive a 50% subsidy on cybersecurity measures through Mijn Cyberweerbare Zaak (MCZ), up to a maximum of €1,250. With ID Control and its partners, you can invest in eligible measures such as a password manager and MFA, as well as patch management, risk assessment, and […]
The number of phishing reports quintupled in the first half of 2026 compared to last year. Email is once again the primary attack channel, while fraudsters are becoming increasingly personal and credible thanks to leaked personal data. Notably, phishing related to booking platforms skyrocketed, with over 90% of reports concerning Booking. The message is clear: […]
Microsoft warns of CaptiveCrunch, a global campaign in which Storm-2945 manipulates hotel, conference, and other guest networks to attack business travelers. Through hijacked captive portals, victims are redirected to phishing pages or misled with fake browser and Windows updates that install malware. The CornFlake RAT and ChocoShell used can steal passwords, cookies, Microsoft 365 tokens, […]
Google’s synchronized passkeys have proven vulnerable to malware that can take over accounts without a PIN, biometrics, or user interaction. Researchers from Palo Alto Unit 42 demonstrated three attacks, including the theft of the secret key used to decrypt all synchronized passkeys. Additionally, some online services blindly relied on the ‘User Verified’ flag without actually […]
The Proofpoint AI-Era Ransomware Report 2026 shows that 65% of affected organisations state that AI makes ransomware attacks more effective through convincing phishing, impersonation, and password theft. Attacks increasingly start via human interaction rather than technical vulnerabilities, while 66% of victims also lost sensitive data. Notably, 58% paid the ransom, but 22% were subsequently extorted […]
Google now allows users to log in via a selfie video, with the company storing this biometric data centrally. With each new login attempt, a live video is compared against the original stored on Google’s servers. While Google claims that the videos are stored encrypted and that movement prompts protect against deepfakes, this development raises […]
In 2024, 14.4 million Dutch citizens used DigiD over 550 million times. The most frequently used login method is the DigiD app with a one-time ID check (38%), followed by password + SMS code (30%). Those aged 65 and over particularly prefer SMS authentication; among those over 80, as many as 56% use this method. […]
ABN Amro is phasing out the e.dentifier for private customers. From now on, they will log in via the banking app or a new USB security key. According to the bank, this proactive step is necessary to continue guaranteeing the long-term security of online banking. For customers without a suitable smartphone, the ten-euro USB key […]
The cyberattack on the municipality of Epe did not begin with a software vulnerability, but with a clever ClickFix social engineering attack in which an employee manually activated malware. The attacker subsequently managed to crack an administrator’s password, gaining access to a Kerberos admin ticket. Following this, an emergency account without MFA was also compromised—an […]