Dutch Institute for Vulnerability Disclosure

Link to our casefile: csirt.divd.nl/cases/DIVD-202… This casefile is continuously updated based on the datasets we receive.

Operation Endgame strikes again 🔥Multiple botnets were taken down and stolen data has been seized. Part of the data comes from infostealer #Rhadamanthys and trojan #VenomRAT. Data was shared with DIVD (among others) to notify victims. Check if your org is impacted [link⬇️]

@WesSec_ Oh don't even... 😂

@DIVDnl Insane timeline 🤣

𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝘄𝗮𝗿𝗻𝗶𝗻𝗴 𝗳𝗼𝗿 𝗦𝗶𝗰𝗼𝗺𝗺𝗡𝗲𝘁 𝗕𝗔𝗦𝗘𝗖 𝗨𝘀𝗲𝗿𝘀 ⚠️ We urge all users of SicommNet BASEC to 𝗶𝗺𝗺𝗲𝗱𝗶𝗮𝘁𝗲𝗹𝘆 𝘀𝘁𝗼𝗽 𝘂𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 and 𝗮𝘀𝘀𝘂𝗺𝗲 𝗮𝗹𝗹 𝗱𝗮𝘁𝗮 𝗵𝗮𝘀 𝗯𝗲𝗲𝗻 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱. Link in comments.

Productwarning: csirt.divd.nl/2025/04/14/Sic… Casefile: csirt.divd.nl/cases/DIVD-202…

Thanks for a great event, and all your work over the last 5 years @DIVDnl !

Five years of making an impact with DIVD 🎉 Shoutout to our volunteers and partners to make this possible. #vulnerabilitydisclosure #cybersecurity #foundersday

@TheRealProcyon ...We are grateful for everything you’ve done for DIVD. We take this situation seriously and are glad to have the opportunity to address it. If you're open to it, we'd welcome further dialogue to ensure this doesn’t happen again. (3/3)

@TheRealProcyon ...It’s clear that, despite having protocols, they failed to offer you the protection you deserved. We are committed to improving this, ensuring everyone feels secure in their role. Please know that your efforts did not go unnoticed… (2/3)

@TheRealProcyon We are saddened to hear about the experience that has led to your decision to stop volunteering with DIVD. We appreciate your courage in coming forward, and we sincerely regret that our environment did not feel safe or supportive for you... (1/3)

Our team has responsibly disclosed six new #zeroday vulnerabilities in #Enphase IQ Gateway devices. Thanks to the efforts of @Wietsman, Hidde Smit, Max van der Horst and @seccubus, the internet has become a bit safer this week. More info ➡️ divd.nl/newsroom/artic…

@PolitieTHTC Amazing job, congratulations on this success!

We strike again! Botnet takedowns, arrests, house searches; #OperationEndgame is well under way. And it does not end here. Check operation-endgame.com for new actions targeted at cybercriminal actors. Stay tuned. #thinkaboutyournextmove

Bij een politieoperatie #operationendgame met 14 landen is belangrijke infrastructuur van #ransomware-criminelen platgelegd. Het DTC heeft vandaag honderden bedrijven en organisaties genotificeerd. Lees verder ⤵️ politie.nl/nieuws/2024/me…

Operation Endgame: Largest Botnet Takedown, 16 Million Victims to be notified ⚠️ In the upcoming days our CSIRT team will notify more than 16 million victims. Take immediate action if you receive an email. csirt.divd.nl/cases/DIVD-202…

@purpletheism Not all heroes wear capes. Some wear @DIVDnl hoodies

We doen vrijdagavond 22 maart een #WhiskyLeaks #FristiLeaks? op ons HQ in Den Haag. Kom je ook? Aanmelden bij @piiindakaas of @Cvthof docs.google.com/document/d/1YG…

@MetallicaMVP Zeker.

@DIVDnl Hoi, is er iemand beschikbaar voor commentaar over dit project?

⚠️ Two #0days vulnerabilities in Ivanti Connect Secure VPN were actively exploited, allowing attackers unauthenticated remote code execution. DIVD is working on identifying the vulnerable instances and notify the owners of these systems. csirt.divd.nl/cases/DIVD-202…

@SIDN Was leuk. Dank voor de gastvrijheid.

Vandaag een interessante update van @DIVDnl voor SIDN-collega’s. Goed te horen hoe zij bijdragen aan het veilig houden van het internet door het opsporen van kwetsbaarheden

@ictnieuws Follow our case blog here: csirt.divd.nl/cases/DIVD-202…

Net iets minder dan 800 Cisco-systemen in Nederland zijn door aanvallers nu voorzien van een 'implant', waarmee ze de macht over die netwerkapparaten overnemen, aldus @DIVDnl. Wereldwijd gaat het volgens hen inmiddels om 46.000 systemen. agconnect.nl/business/secur…

Ruim 10.000 switches, routers en andere netwerkapparatuur van #Cisco zijn gehackt via een kritieke kwetsbaarheid waar het bedrijf eerder deze week al voor waarschuwde. agconnect.nl/business/secur…