Posts Tagged ‘NIS2’
SME Squeeze: NIS2, AI Act, Ransomware Collide
On January 7, 2026, the ransomware group Akira hit Buhlmann Group, a Hamburg-based steel and metal trading company with roughly 2,000 employees and €428 million in annual revenue. The attackers made off with about 55GB of data — engineering drawings, HR files, financial records — before anyone at the company could respond. Buhlmann wasn’t an…
Read MoreSwiss Federal SharePoint Breach Hits 200 Accounts
The Swiss federal SharePoint breach compromised roughly 200 accounts at Switzerland’s Federal Office of Information Technology, Systems and Telecommunication (BIT/FOITT), the agency confirmed in early August 2026. It is the first time DIESEC’s ongoing SharePoint vulnerability coverage has connected to a confirmed, named breach inside a DACH government body — not just a vendor advisory.…
Read MoreTop 5 Cybersecurity News Stories July 24, 2026
The five stories in this week’s Cybersecurity News Stories July 24, 2026 share a structural feature that distinguishes them from the opportunistic exploitation patterns that dominate most news cycles: in each case, the component that was compromised, configured, or exposed was not the primary IT system the organisation considers its attack surface. It was the…
Read MoreEY Third-Party Data Breach: 15 Days Inside Helpdesk
EY third-party data breach: attackers spent 15 days inside a support-ticketing platform used by Ernst & Young’s tax practice, walking out with client tax filings, Social Security numbers and financial account data before anyone noticed — the firm’s third vendor-side security failure in under three years. What Happened This EY third-party data breach ran from…
Read MoreTop 5 Cybersecurity News Stories July 17, 2026
The five stories in this week’s Cybersecurity News Stories July 17, 2026 share a structural property that distinguishes them from the opportunistic exploitation patterns that characterised earlier months of this year: in each case, the compromised or exposed component is one the organisation has placed into a category other than “security risk.” A remote-access appliance…
Read More