News & insights

Even the FBI is not beyond the reach of ShinyHunters. In the article of France 24, our CEO and founder, Geert Baudewijns, explains how this hacker collective operates and what businesses can learn from it.

At least 270 Belgian organizations have been affected by the large-scale FortiBleed cyber incident, in which criminals stole access credentials to Fortinet firewalls and are actively exploiting them. This is according to an analysis by Secutec, which mapped the impact in Belgium in collaboration with the Threat Research Unit of SOCRadar, a specialist in darknet monitoring. At present, attackers still have administrator-level control over the firewalls of more than 100 Belgian organizations, leaving their networks exposed.

Dirty Frag is a new Linux zero-day that allows local attackers to gain root privileges on most major Linux distributions using a single command. It consists of two chained CVEs (CVE-2026-43284 and CVE-2026-43500) that together create a high-severity local privilege escalation (LPE) in the Linux kernel, with a public exploit available before patches were rolled out.

A recently disclosed zero-day vulnerability, referred to as “YellowKey”, affects Microsoft Windows systems and allows attackers to bypass BitLocker encryption. BitLocker is designed to protect sensitive data by encrypting entire drives. However, this vulnerability exploits a weakness in the Windows Recovery Environment, it is a built-in feature used for troubleshooting and repairing systems.

The researcher who disclosed this vulnerability also released a PoC (proof of concept) exploit code, making it easier for others to replicate the attack.

While Artificial Intelligence (AI) brings many positive innovations and lightens our daily workload, it also introduces new security risks. As AI tools become more advanced and easily accessible, cybercriminals are increasingly using them for malicious purposes.

Cybersecurity experts have observed a rising trend of scammers using deepfake technology during virtual interactions. These attacks frequently target video job interviews for fully remote positions, as well as other high-trust conversations.

We want to inform you about a recently disclosed security vulnerability affecting NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) identified as CVE-2025-5777. And also CVE-2025-6543 which is a memory overflow vulnerability that could lead to Denial Of Service.

On March 21, 2025, cybersecurity firm CloudSEK’s XVigil uncovered a major supply chain breach involving Oracle Cloud. A threat actor known as "rose87168" is reportedly selling 6 million records stolen from Oracle’s SSO and LDAP systems. The leaked data includes: JKS files, encrypted SSO passwords, key files and enterprise Manager JPS keys.