Why data protection needs a sovereign makeover
Hacks at ODIDO and Clinical Diagnostics, and data breaches at various trusted government organisations such as GGD, Police, Dienst Justitiële Inrichtingen and many others all imply the obvious: we need better protection of our sensitive data. This calls for new approaches for still too often neglected threats. For this purpose, Radboud University’s iHub has been […]
The Threats of High Power IoT on the Power Grid
More and more devices are being connected to the electricity grid, including High Power IoT. Examples are solar inverters, electric cars, and heat pumps. This presents opportunities, but also many dangers. What are these dangers? What laws and regulations apply to this High Power IoT on the power grid? And what would be possible solutions […]
Police Hack and Pass-the-Cookie: No Crumbs, Full Access
In September 2024, The Netherlands police faced a data breach in which the Russian state-supported threat actor Laundy Bear gained access to the corporate address book. This presentation gives insight into how the attack occurred, how the High Tech Crime Team and the Public Prosecution Service responded and lessons learned.
What’s your business here? NL-UA cybersecurity collaboration in practice
As the full-scale war in Ukraine enters its fifth year, the country is dealing with daily cyber-attacks. At the same time, cyber-attacks in The Netherlands have consistently increased. Both countries are host to a plethora of cyber experts working in the private sector. What happens when they combine forces? This panel discussion considers the impact […]
What Yesterday’s Cyber Ops Tell Us About Tomorrow
A destructive cyberattack on Poland’s energy infrastructure was more than another cyber incident. It was a warning of how state-aligned operations are evolving across Europe. Cyberattacks, disinformation, economic pressure, AI and autonomous systems are increasingly being combined to create strategic impact without crossing the threshold of conventional war. At the same time, capabilities once reserved […]
Knight to C2: The Endgame for Botnets
Endgame is an ongoing law-enforcement project tackling the roots of ransomware; Botnets, RAT’s and infostealers. To combat this cybercrime, you need a broad systemic approach. In order to achieve that, we need cyber governance: the collaboration in which multiple public and private partners take their responsibilities on these topics: – Actors/suspects – Financial assets – […]
A Room With a View
How an asymmetric attack on trusted Webex Room devices made them in to listening devices and exposed a path into password-protected meetings around the world. Webex Room devices sit inside some of the world’s most sensitive corporate and government meeting environments. We approached them from an attacker’s perspective and discovered that trust in the device […]
IDRS report demonstrates cyber resilience for NIS2/DORA
Cyber resilience is increasingly a boardroom topic, but how do C-level executives and supervisory bodies actually know whether an organisation is resilient enough? Risk dashboards and audit reports exist in abundance, yet they rarely give decision-makers the holistic, comparable, and actionable insight they need. The International Digital Reporting Standards (IDRS) was developed precisely to address […]
From Radar to Roadmap: High-Tech Product Security
Standard security foresight tools were built for enterprise IT — not for products with 15-year lifecycles, tightly coupled hardware-software architectures, and supply chains where a single compromise can impact thousands of devices. This session presents two complementary instruments developed by the Brabant House of Cyber (BHoC): the Product Security Innovation Radar, a structured prioritization methodology […]