The German police are warning of a scam method via messenger services where a fake poll is used to take over accounts. The victim receives a link, often from an acquaintance, leading to a fraudulent page. There, you are asked to enter your phone number. This input starts the device linking function in the background, […]
According to the Danish newspaper Politiken, at least three user accounts of the Danish IT company Pays used the password “123456” at the time a hacker gained access to the Danish Civil Registration System (CPR). One of these accounts was the company’s administrator account. The incident demonstrates how a weak basic security measure can have […]
Starting September 7, 2026, self-employed professionals and small businesses can receive a 50% subsidy on cybersecurity measures through Mijn Cyberweerbare Zaak (MCZ), up to a maximum of €1,250. With ID Control and its partners, you can invest in eligible measures such as a password manager and MFA, as well as patch management, risk assessment, and […]
The number of phishing reports quintupled in the first half of 2026 compared to last year. Email is once again the primary attack channel, while fraudsters are becoming increasingly personal and credible thanks to leaked personal data. Notably, phishing related to booking platforms skyrocketed, with over 90% of reports concerning Booking. The message is clear: […]
The FBI warns of highly targeted OAuth consent phishing attacks aimed at prominent figures, their families, and acquaintances. Attackers impersonate government officials, media personnel, or known contacts, luring victims with fake file shares or meeting invitations. Granting permission to a malicious OAuth application gives attackers long-term access to emails, files, and other sensitive account data. […]
Researchers have uncovered new attack vectors that can undermine passkey authentication, challenging the idea that passwordless automatically means attack-proof. The attacks focus on weaknesses around the authentication flow and implementation, rather than breaking the underlying cryptography. Manipulation of WebAuthn processes, fallback mechanisms and compromised environments can potentially allow attackers to bypass or weaken passkey protection. […]
The Proofpoint AI-Era Ransomware Report 2026 shows that 65% of affected organisations state that AI makes ransomware attacks more effective through convincing phishing, impersonation, and password theft. Attacks increasingly start via human interaction rather than technical vulnerabilities, while 66% of victims also lost sensitive data. Notably, 58% paid the ransom, but 22% were subsequently extorted […]
Google now allows users to log in via a selfie video, with the company storing this biometric data centrally. With each new login attempt, a live video is compared against the original stored on Google’s servers. While Google claims that the videos are stored encrypted and that movement prompts protect against deepfakes, this development raises […]
In 2024, 14.4 million Dutch citizens used DigiD over 550 million times. The most frequently used login method is the DigiD app with a one-time ID check (38%), followed by password + SMS code (30%). Those aged 65 and over particularly prefer SMS authentication; among those over 80, as many as 56% use this method. […]
The cyberattack on the municipality of Epe did not begin with a software vulnerability, but with a clever ClickFix social engineering attack in which an employee manually activated malware. The attacker subsequently managed to crack an administrator’s password, gaining access to a Kerberos admin ticket. Following this, an emergency account without MFA was also compromised—an […]
- 1
- 2