Vapor Panda used agentic AI tool ARTEX against about 140 targets
CrowdStrike says the China-linked campaign has hit more than 200 organizations in at least 14 countries since October 17.
84
Country
Belgium
- Mentions · 7d5
- Mentions · 30d29
- All mentions46
- First seenAug 25, 2026
- Last mentioned2h ago
Timeline
46 articles · newest firstCrowdStrike: Vapor Panda used ARTEX against over 200 organizations
From October 17 the China-linked group hit ministries, telecoms, and U.S. defense-related targets; post-exploitation is confirmed at nine.
86
GhostWriter linked to first Belarus data wipe at Ukrainian firm
ESET ties FrostyNeighbor to the wipe and says Belarus-aligned operators increasingly mirror Russian priorities in Ukraine.
64
Belgium tax agency takes MyMinfin offline after cyberattack
FOD Financiën says the attack was stopped within hours without data access, and extends an October 31 filing deadline to November 16.
58
Cyberattack takes Belgian tax portal MyMinfin offline before deadline
FPS Finance says there is no sign data was stolen and will extend the October 31 filing deadline later.
58
PHP2Shell takes 32 UK government services offline
AWS says the two critical PHP bugs were exploited four days before disclosure; no public-sector compromise is confirmed.
88
Ahold Delhaize restoring services after a cyberattack
Many European sites are back and Albert Heijn home delivery is expected by Friday; no data theft is confirmed.
74
Ahold Delhaize cyberattack disrupts services in the US and Europe
Stores stayed open; investigators have not found stolen customer, associate or partner data.
74
Ahold Delhaize confirms malicious actions behind grocery outages
US online shopping at Food Lion and Stop & Shop is still down; Dutch brand sites are back, with Albert Heijn deliveries expected Friday.
74
Broadcom WPS flaw lets nearby attackers gain root on Wi-Fi routers
The bug has sat in Broadcom’s SDK since at least 2010, has no CVE, and tested Belgian gateways were still unpatched.
68
16-year-old Broadcom WPS flaw can give nearby attackers router control
Researcher demos stole a Wi-Fi password and opened a shell without the network key; tested Belgian gateways were still unpatched.
73
Unpatched Broadcom WPS flaw lets nearby attackers run code as root
Quentin Kaiser's own exploits read a Wi-Fi password and opened an over-the-air shell; he reports no real-world attacks.
74
Broadcom Wi-Fi bug since 2010 allows unauthenticated router code execution
Quentin Kaiser demonstrated exploits on two Belgian ISP routers; Broadcom assigned no CVE after an incomplete 2018 fix.
74
Ledger implant linked to $93M theft; npm flaw hit 1,500 packages
The roundup also covers an exploited Windows Shell flaw and an Ivanti Connect Secure zero-day chain.
74
Israeli settlers attack European diplomatic cars in West Bank beat French mayor
Israeli settlers attacked European diplomatic cars in the West Bank and beat a visiting French mayor.
3
France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
French internet-exposed Danfoss StoreView controllers fell 71 percent within three days after a supermarket cyber-attack.
74
Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
ANSSI says the French supermarket refrigeration attack also hit Copeland and Dixell controllers, affecting about 700 stores.
84
Eclipse Foundation Eclipse Milo
CISA warns Eclipse Milo through 1.1.4 has six high-severity flaws; users should move to 1.1.5.
68
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Honeypots recorded 1,423 attempts exploiting Langflow's critical authenticated RCE, CVE-2026-105740.
78
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hackers exploited unpatched Danfoss fridge controllers, spoiling food at more than 400 European grocery stores.
82
Fridge hack costing millions and sparking fires stemmed from poor security
Poorly secured supermarket refrigeration controllers were mass-hacked, causing fires and huge reported losses across Europe.
72
European Cities Deploy NVIDIA-Powered AI Agents to Run Smarter Urban Operations
European cities and partners are piloting NVIDIA AI agents and digital twins for urban operations.
44
European Retail Firms Confirm Cyber Incidents
Ahold Delhaize, TFG, and ASOS confirmed cyber incidents, with ASOS reporting access to customer contact data.
64
Retail giant Ahold Delhaize takes systems offline after cyberattack
Ahold Delhaize took systems offline after a cyberattack, disrupting apps and scheduling at US and European grocery chains.
76
Google Data Centers around the world
Google lists data center sites across Asia, Europe, and the Americas, including many still in development.
4
16-Year-Old Suspected KillSec Ransomware Leader Arrested in International Operation
Authorities arrested three KillSec suspects, including an alleged 16-year-old administrator, in a nine-country operation.
74
Teenagers suspected of leading KillSec ransom group arrested during international operation
An international operation arrested three suspects, including teenagers, accused of leading the KillSec ransomware group.
74
Operation KillSwitch: Police Dismantle KillSec Ransomware Group
Europol's Operation KillSwitch dismantled KillSec ransomware after about 500 confirmed attacks and seized 110 terabytes.
80
16-year-old suspected leader of KillSec ransomware group arrested
Eurojust says a 16-year-old suspected KillSec leader was arrested after nearly 1,000 ransomware attacks.
77
PaperPhone Headless Browser Network Uses 75,000 IPs and Fabricated Mobile Identities Across 43 Countries
CrowdSec says the PaperPhone headless-browser network scraped the web from 75,000 IPs across 43 countries.
64
PaperPhone Cluster Shows How One Bot Operator Can Look Like Thousands of Mobile Users
CrowdSec says the PaperPhone scraper used 75,000 IPs in 43 countries to impersonate mobile users.
46
Cybersecurity jobs available right now: September 22, 2026
Help Net Security posted a September 22 list of cybersecurity jobs across threat intel, appsec, SOC, malware analysis, and cloud roles.
18
Belgian table tennis, gymnastics federations hit by cyberattacks
Belgian sports federations are investigating data breaches after hacker Venus1337 claimed to have stolen member data.
60
Fake parcel delivery messages steal your card and bank details
Phishing emails impersonating bpost claim a €4.95 customs fee to trick Belgian customers into submitting card and bank details on fake courier sites.
38
Hackers Poison Movie Torrents With MovieReaper Malware That Uses Solana for C2
Poisoned movie torrents deliver MovieReaper malware using Solana blockchain for resilient C2, infecting several hundred victims across multiple continents.
55
MovieReaper Malware Spreads Through Pirated Movie Torrents and Uses Solana for C2
Kaspersky reports MovieReaper malware distributed via compromised torrent repository itorrents.org, using Solana blockchain for resilient C2 across four continents.
68
The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents
Kaspersky uncovers MovieReaper, a multi-stage malware framework spread via compromised itorrents.org torrent files, hitting hundreds of users.
64
Scammers leave AI fingerprints all over fake antivirus renewal page
Malwarebytes found an AI-built fake Avast renewal page in Belgium whose contractor-style code comments show scammers now generate polished pages with AI.
42
International Meteor Organization says cyberattack dealt ‘critical blow’ to website
A cyberattack forced the International Meteor Organization's website offline, with weeks of partial downtime expected during an infrastructure migration.
25
AI helps scammers build convincing antivirus renewal pages
Malwarebytes found scammers using AI to build polished fake antivirus renewal pages impersonating Avast, harvesting names, emails and phone numbers for follow-up fraud calls.
35
Related CVEs
by mentions- CVE-2025-41451<1%8.7Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version…
- CVE-2025-41450<1%8.2Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
- CVE-2025-41452<1%6.8Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow…
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- Langflow: The MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before…
- CVE-2026-4108980%9.8Unauthenticated Stack Buffer Overflow RCE in Windows Server Netlogon (CVE-2026-41089)
- CVE-2026-58080<1%8.8In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`
- CVE-2026-63252<1%8.7In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects…
- CVE-2026-61387<1%6.9In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe
- CVE-2026-63248<1%6.9In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization
Appears with
- Ahold Delhaizevictim · 5
- Europolorganization · 4
- Gall & Gallvictim · 4
- Etosvictim · 4
- Broadcomvendor · 4
- Danfossvendor · 4
- KillSecthreat actor · 4
- Albert Heijnvictim · 4
- Clarotyorganization · 4
- VOOorganization · 4
- Eurojustorganization · 4
- Proximusorganization · 4
- Orange Belgiumorganization · 3
- Askeyvendor · 3
- Stop & Shopvictim · 3
- Kasperskyvendor · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.