Growing Pains: Cyber Situation Awareness In Expanding Ecosystems

Situation awareness (SA) is a term often used in the context of cybersecurity collaborations, where knowledge about risks and threats get shared in order to increase collective resilience against cyber threats. The term has increased in popularity ever since the evaluation of the first European Directive on Network and Information Security (NIS1) stated that there […]

Announcing a new NCSC-NL tool: Analysis tools for Cyberexperts

We often work under intense time pressure in complex and challenging situations when limited information is available. It’s easy to fall back on our gut feeling as opposed to our training. We overlook critical details or fill in the blanks ourselves. This is completely understandable. It’s human nature to rely on instinct and assumptions when […]

CERTain Expectations: An Empirical Study into the Challenges of Sector CSIRTs

Sectoral Computer Security Incident Response Teams (sector CSIRTs) play an increasingly vital role in managing cybersecurity incidents within specific sectors, such as local government or critical infrastructures. Despite their growing importance, there is a lack of industry guidance and academic research on the unique challenges faced by sector CSIRTs. This study aims to fill this […]

Young Cyber Talents

Closing event of the French-Dutch project ‘Young Cyber Talents’ | pitching their final results for the challenge | Jury evaluation | Award ceremony | Presentations on French-Dutch Talent Programs and other French-Dutch collaborations.

Unveiling “Lucid” – A Silent Enabler of Financial Fraud

Unveiling “Lucid” – A Silent Enabler of Financial Fraud Lucid is a rising but under-the-radar Phishing-as-a-Service (PhaaS) platform that’s quietly fueling large-scale financial fraud across the globe. Built by Chinese-speaking threat actors, it supports phishing campaigns targeting over 200 organizations in 80+ countries, enabling cybercriminals to steal payment card data with ease. The group stands […]

Outlook One Financial Threat Landscape

The FI-ISAC is pleased to present the One Financial Threat Landscape. FI-ISAC. Through collaboration, we create the One Financial Threat Landscape. The One Financial Threat Landscape provides insight into the 10 biggest threats facing our industry. It is a product created by the financial sector, used by the financial sector, but delivering value across the […]

Scanning the Dutch Healthcare’s External Attack Surface

What are the riskiest technologies used in the Dutch healthcare sector? Do people still expose RDP? Is Dutch healthcare data processed inside the European Union? Z-CERT regularly scans many IPs and domains in use by the Dutch Healthcare sector. In this talk, we will share insights from performing External Attack Surface Management (EASM) on hundreds […]

SaaSified Crime: From AiTM to Banking Fraud

Adversary-in-the-Middle (AiTM) phishing attacks have evolved from niche exploits to scalable, SaaS-based crime tools. By bypassing MFA, these services enable attackers to gain access with minimal effort. Now, Dutch cybercriminals are mimicking this model: packaging banking fraud kits as subscription-based services. This talk highlights how the professionalization of phishing is lowering the barrier to entry […]