Energy giant ENGIE discloses data breach affecting customers post, oktober 27, 2026oktober 30, 2026 French energy giant ENGIE, one of the world’s largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. ENGIE operates in renewable energy, infrastructure, and customer energy supply in 30 countries, employs over 90,000 people, and reported €71.9 billion… Continue Reading
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption post, oktober 27, 2026oktober 30, 2026 The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It’s… Continue Reading
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE auto_post, oktober 26, 2026 Volgens meldingen is CVE-2026-85097, een kwetsbaarheid in de Bricksforge WordPress-plugin met een CVSS-score van 10.0, momenteel actief in gebruik om ongeauthenticeerd PHP-code te uploaden en uit te voeren. De directe aanbeveling is eenduidig: beheerders moeten zo snel mogelijk controleren of ze de plugin gebruiken en, zolang er geen bevestigde en… Continue Reading
Voor je het weet, zitten de hackende AI-agents overal in je systeem: grote zorgen bij bedrijven om hevige cyberaanvallen auto_post, oktober 26, 2026 De berichtgeving over AI‑agents die zelfstandig hacktaken kunnen uitvoeren is zorgelijk en vraagt directe actie: bedrijven moeten hun basisverdediging versterken en overheid en sectorpartners moeten regels en detectiecapaciteit opschalen. Technische maatregelen zoals netwerksegmentatie, sterk toegangsbeheer en geavanceerde monitoring verminderen de impact; tegelijkertijd zijn oefening, informatie‑deling en investeringen in securitypersoneel onmisbaar…. Continue Reading
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity post, oktober 25, 2026oktober 26, 2026 In an update, Palo Alto Networks Unit 42 said it’s retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. “What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application,”… Continue Reading
Critical Vulnerabilities in PHP Require Immediate Patching post, oktober 23, 2026oktober 26, 2026 CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP. The vulnerabilities affect all PHP installations serving web requests, including Apache with mod_php (Note: PHP considers this highest risk), PHP-FPM,… Continue Reading
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions post, oktober 23, 2026oktober 30, 2026 Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an… Continue Reading
Cyberattack shuts down refrigerators at French supermarkets post, oktober 12, 2026oktober 13, 2026 Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. Victims include Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, with French outlets reporting that the attack affected 250 to 350 stores, causing significant financial losses and food waste…. Continue Reading
Admin Password “123456” Led to 8.8 Million Danish CPR Data Breach post, oktober 12, 2026oktober 13, 2026 A weak administrator password is linked to a major Danish data breach that exposed information tied to about 8.8 million national identification numbers. At least three accounts at Pays, an IT company on the island of Funen, reportedly used “123456”, including an administrator account. Continue Reading
Retail giant Ahold Delhaize takes systems offline after cyberattack post, oktober 12, 2026oktober 13, 2026 Retail giant Ahold Delhaize, one of the world’s largest food retail chains, confirmed today that it was forced to take some systems offline after a “cybersecurity incident.” As a wholesale company and multinational retailer, Ahold Delhaize operates more than 9,400 local stores across Europe, the United States, and Indonesia, employs… Continue Reading