EU investigating ‘IT security incident’ involving multiple agencies

The scope and nature of the incident were not immediately clear.

Cybersecurity experts at the European Union are investigating an “IT security incident” involving multiple institutions, though “no major information breach” has been detected, EU officials said Tuesday.

The scope and nature of the incident were not immediately clear, but a spokesperson for the European Commission, the EU’s executive branch, said the commission had set up a “24/7 monitoring service” in response to the incident.

“The European Commission and other EU institutions, bodies or agencies have experienced an IT security incident in their IT infrastructure,” the commission spokesperson said in an email.

A spokesperson for the European Parliament said the parliament and other EU bodies had “received an alert on [a] possible vulnerability in its IT infrastructure.” The parliament “took immediate measures to check and protect its servers against this vulnerability,” the spokesperson said.

As a 27-country bloc that affects trade and foreign policy on the continent, EU institutions are natural targets for hackers of all stripes. A 2018 alleged Chinese hacking operation targeted the cables of European diplomats, private sector researchers claimed then.

More recently, in December, unidentified hackers breached the European medicines regulator, which oversees the rollout of coronavirus vaccines.  

The commission is working with CERT-EU, the bloc’s office for responding to hacking incidents, and the IT vendor whose software is involved in the incident, the commission spokesperson said. The spokesperson did not identify the IT vendor.

“At this stage, it is too early to provide any conclusive information relating to the attack vector and scope of the incident,” the statement reads.

EU employees were recently warned internally about phishing attempts, Bloomberg News reported, citing an official familiar with the matter.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure