Lara De Jong
-

Ukrainian Intelligence Launches Airborne Special Operation in Pokrovsk
Ukraine’s Main Directorate of Intelligence (ГУР) has launched a significant airborne special operation in Pokrovsk, Donetsk Oblast, targeting areas previously claimed by Russian forces. The mission, reportedly led by GUR head Kyrylo Budanov, follows intense Russian reconnaissance and sabotage efforts in the region since mid-2025, escalating into small-arms combat within the city.
-

TEE.fail: Researchers Break Intel and AMD TEEs via DDR5 Memory Bus Interception
Researchers from Georgia Tech and Purdue have revealed TEE.fail — an attack that breaks Intel and AMD Trusted Execution Environments by physically interposing on DDR5 memory buses, extracting attestation keys and undermining confidential computing protections.
-

What Is Bring Your Own Vulnerable Driver (BYOVD)?
Bring Your Own Vulnerable Driver (BYOVD) is a technique that leverages signed but vulnerable drivers to gain kernel-level access and evade security controls.
-

Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack
Cisco Talos and Trend Micro researchers have observed the Qilin ransomware group deploying a Linux payload on Windows systems using a BYOVD technique, marking a hybrid attack blending cross-platform execution with legitimate IT tools.
-

CVE-2025-59287: Actively Exploited WSUS Remote Code Execution Vulnerability Triggers Emergency Patching
CISA and security researchers warn of active exploitation of CVE-2025-59287, a critical WSUS RCE vulnerability prompting emergency patching across enterprise systems.
-

Unit 42 Links Smishing Triad to 194 000 Malicious Domains in Global Phishing Operation
Unit 42 research links Smishing Triad to 194 000 malicious domains; Fortra warns of brokerage phishing expansion and PhaaS industrialization.
-

FIA Driver Portal Flaw Granted Admin Access, Exposed F1 Driver Data Including Max Verstappen’s PII
Security researchers identified a mass assignment flaw in the FIA Driver Categorisation portal that exposed personal data of Formula 1 drivers, including Max Verstappen, before being patched.
-

Dutch Public Health Agency RIVM Restores Website After Hackers Posted Fake Information
The RIVM took its website offline after hackers posted false content through a vulnerable web form; operations have since been restored.
-

Chinese Espionage in Europe: Inside the Cases Exposing Beijing’s Expanding Reach
An investigation by The Spectator highlights Europe’s growing exposure to Chinese intelligence operations, blending cyber and human espionage tactics.
-

Two Dutch teens arrested in rare Russian espionage case
Two Dutch teenagers have been arrested in The Hague for allegedly conducting reconnaissance on behalf of pro-Russian hackers — a rare espionage case that highlights the risks of youth recruitment in hybrid cyber operations.
