Gibraltar Government Confirms Contained Cyber Security Incident
Article Content
- •The cyber incident involved unauthorized access to the Government's cloud systems.
- •No successful access to sensitive databases has been detected so far.
- •A forensic investigation is ongoing to assess the full impact of the breach.
The Gibraltar Government announced it has contained a cyber security breach affecting its cloud systems, which include Microsoft Outlook, Teams, SharePoint, and OneDrive. The incident, which began several weeks ago, involved unauthorized access to the cloud environment. Following a notification from Microsoft about a potential data breach, the Information Technology and Logistics Department (ITLD) initiated containment measures and secured affected systems. Ongoing monitoring has shown no signs of successful access, although attempts are still being blocked. The Government's main databases containing residents' personal records are stored separately, minimizing the risk of data exposure. A forensic investigation is underway to determine the full extent of the breach and whether any data was accessed or extracted. The Government has suspended some services to facilitate forensic work and has urged the public to be cautious of unexpected communications. Further updates will be provided as the investigation progresses.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Outlook in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems were affected?
Is there any indication of data being accessed?
What should the public do in response?
Continue Reading
CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…