Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters," the Politie Landelijke Opsporing en...

CVE-2026-49462

NL Portal Backend Libraries (used in Dutch government portals) ships a default configuration in versions up to and including 3.0.0 that exposes two GraphQL developer features without requiring authentication: the GraphiQL playground at the /graphiql endpoint and schema introspection . Together, t...

EUVD-2026-76244

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The nl.nl-portal:documenten-api package through version 3.0.0 and the nl.nl-portal:besluiten package from version 1.5.0 through 3.0.0...

CVE-2026-49464: Authorization Bypass Through User-Controlled Key

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The nl.nl-portal:taak package from version 1.5.0 through 3.0.0 fails to verify ownership when processing the submitTaakV2 GraphQL...

CVE-2026-81356

creationtimestamp| type| source ---|---|--- 2026-09-08 20:18:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351 2026-09-08 22:04:07+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:39+00:00| seen|...

CVE-2026-78441

creationtimestamp| type| source ---|---|--- 2026-09-08 20:18:10+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:07:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:44+00:00| seen|...

CVE-2026-77481

creationtimestamp| type| source ---|---|--- 2026-09-08 20:17:50+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:03:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:44+00:00| seen|...

CVE-2026-68776

creationtimestamp| type| source ---|---|--- 2026-09-08 20:17:12+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:03:12+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:43+00:00| seen|...

CVE-2026-67639

creationtimestamp| type| source ---|---|--- 2026-09-08 20:16:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:03:20+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:42+00:00| seen|...

CVE-2026-67638

creationtimestamp| type| source ---|---|--- 2026-09-08 20:16:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:03:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:42+00:00| seen|...

CVE-2026-67630

creationtimestamp| type| source ---|---|--- 2026-09-08 20:16:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:03:11+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:41+00:00| seen|...

CVE-2026-69361

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0349 2026-09-08 22:02:22+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:45+00:00| seen|...

CVE-2026-78509

creationtimestamp| type| source ---|---|--- 2026-09-08 20:13:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztjfduja2b 2026-09-08 20:19:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0352 2026-09-08 22:01:17+00:00| seen|...

CVE-2026-73009

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzti4uuzd2t 2026-09-08 20:19:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:02+00:00| seen|...

CVE-2026-72982

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzthlqzdf2f 2026-09-08 20:20:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:00+00:00| seen|...

CVE-2026-69641

creationtimestamp| type| source ---|---|--- 2026-09-08 20:10:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztehbxin2f 2026-09-08 20:15:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0349 2026-09-08 22:02:20+00:00| seen|...

CVE-2026-69590

creationtimestamp| type| source ---|---|--- 2026-09-08 20:10:34+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztdwheek22 2026-09-08 20:19:34+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:00:58+00:00| seen|...

Malicious code in dutch-aqua-raven (npm)

Source: amazon-inspector c4332c39d396c4c83fdcad3e912bb7eef53582c4475ff775b2adea5faad2e6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dutch-fuchsia-kangaroo (npm)

Source: amazon-inspector 58d1523e6605e9782bdebd2f9dca2b3b83be8c74f50c927552532757a1421523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dutch-aquamarine-landfowl (npm)

Source: amazon-inspector 1b92e3adc6dd708c2c810057869f50f82486f77dfb0bc5f5cf8f6a97305cf836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...