Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE auto_post, oktober 26, 2026 Volgens meldingen is CVE-2026-85097, een kwetsbaarheid in de Bricksforge WordPress-plugin met een CVSS-score van 10.0, momenteel actief in gebruik om ongeauthenticeerd PHP-code te uploaden en uit te voeren. De directe aanbeveling is eenduidig: beheerders moeten zo snel mogelijk controleren of ze de plugin gebruiken en, zolang er geen bevestigde en… Continue Reading
Voor je het weet, zitten de hackende AI-agents overal in je systeem: grote zorgen bij bedrijven om hevige cyberaanvallen auto_post, oktober 26, 2026 De berichtgeving over AI‑agents die zelfstandig hacktaken kunnen uitvoeren is zorgelijk en vraagt directe actie: bedrijven moeten hun basisverdediging versterken en overheid en sectorpartners moeten regels en detectiecapaciteit opschalen. Technische maatregelen zoals netwerksegmentatie, sterk toegangsbeheer en geavanceerde monitoring verminderen de impact; tegelijkertijd zijn oefening, informatie‑deling en investeringen in securitypersoneel onmisbaar…. Continue Reading
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity post, oktober 25, 2026oktober 26, 2026 In an update, Palo Alto Networks Unit 42 said it’s retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. “What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application,”… Continue Reading
Critical Vulnerabilities in PHP Require Immediate Patching post, oktober 23, 2026oktober 26, 2026 CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP. The vulnerabilities affect all PHP installations serving web requests, including Apache with mod_php (Note: PHP considers this highest risk), PHP-FPM,… Continue Reading
Cyberattack shuts down refrigerators at French supermarkets post, oktober 12, 2026oktober 13, 2026 Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. Victims include Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, with French outlets reporting that the attack affected 250 to 350 stores, causing significant financial losses and food waste…. Continue Reading
Admin Password “123456” Led to 8.8 Million Danish CPR Data Breach post, oktober 12, 2026oktober 13, 2026 A weak administrator password is linked to a major Danish data breach that exposed information tied to about 8.8 million national identification numbers. At least three accounts at Pays, an IT company on the island of Funen, reportedly used “123456”, including an administrator account. Continue Reading
Retail giant Ahold Delhaize takes systems offline after cyberattack post, oktober 12, 2026oktober 13, 2026 Retail giant Ahold Delhaize, one of the world’s largest food retail chains, confirmed today that it was forced to take some systems offline after a “cybersecurity incident.” As a wholesale company and multinational retailer, Ahold Delhaize operates more than 9,400 local stores across Europe, the United States, and Indonesia, employs… Continue Reading
Cyber exec arrested in case allegedly tied to ShinyHunters hackers auto_post, oktober 12, 2026oktober 12, 2026 De arrestatie van een bekende cybersecurity-executive die volgens meerdere berichten wordt gelinkt aan ShinyHunters is een serieuze wake-upcall. Directe conclusie: slachtoffers en leveranciers moeten strenger toezicht en meer transparantie eisen; oplossing: certificering, due diligence en wettelijke kaders voor partijen die namens organisaties met afpersers onderhandelen. Context: ShinyHunters wordt volgens de… Continue Reading
Ransomware recovery CEO charged over secret ransom payments auto_post, oktober 12, 2026oktober 12, 2026 De recente aanklacht tegen de eigenaar van MonsterCloud draait een belangrijke lamp aan: slachtoffers van ransomware kunnen opnieuw worden uitgebuit door de bedrijven die hen horen te helpen. Conclusie en oplossing in één zin: er is dringend behoefte aan transparantie, externe audits en minimale gedragsregels voor ransomware‑herstelproviders. Volgens de aanklacht… Continue Reading
Germany arrests alleged core Qilin ransomware member after extradition post, oktober 9, 2026oktober 12, 2026 Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. Japan has confirmed the extradition to Germany, with the National Police Agency saying that the suspect was detained after arriving in the country as a tourist…. Continue Reading