Theregister Dutch Data Protection Authority Breached in Ivanti Zero-Day Exploitation
Article Content
Browse articles 
The Dutch Data Protection Authority (AP) confirmed it was compromised during a wave of attacks exploiting Ivanti vulnerabilities. The attack, which occurred on January 29, involved the Ivanti Endpoint Manager Mobile (EPMM) bugs, leading to a data breach affecting AP employees. This incident was part of a broader exploitation of zero-day vulnerabilities in Ivanti products.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
Timeline
2026-01-29
Attack on Dutch Data Protection Authority occurred
2026-01-29
CVE-2026-1340 published
2026-01-29
CVE-2026-1281 published and added to CISA KEV
2026-02-01
First public PoC for CVE-2026-1281 released
2026-02-09
AP confirms breach in letter to Dutch parliament
More articles in this cluster (4)
Following this threat?
Track Council For The Judiciary and CVE-2026-1281 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…