Dutch Institute for Vulnerability Disclosure

We aim to make the digital world a safer place by reporting vulnerabilities we find in digital systems to the people who can fix them.

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

Link to our casefile: https://t.co/Ak4Pqktrw7
This casefile is continuously updated based on the datasets we receive.

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

Operation Endgame strikes again 🔥Multiple botnets were taken down and stolen data has been seized.
Part of the data comes from infostealer #Rhadamanthys and trojan #VenomRAT. Data was shared with DIVD (among others) to notify victims.
Check if your org is impacted [link⬇️]

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@WesSec_ Oh don't even... 😂

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝘄𝗮𝗿𝗻𝗶𝗻𝗴 𝗳𝗼𝗿 𝗦𝗶𝗰𝗼𝗺𝗺𝗡𝗲𝘁 𝗕𝗔𝗦𝗘�� 𝗨𝘀𝗲𝗿𝘀 ⚠️
We urge all users of SicommNet BASEC to 𝗶𝗺𝗺𝗲𝗱𝗶𝗮𝘁𝗲𝗹𝘆 𝘀𝘁𝗼𝗽 𝘂𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 and 𝗮𝘀𝘀𝘂𝗺𝗲 𝗮𝗹𝗹 𝗱𝗮𝘁𝗮 𝗵𝗮𝘀 𝗯𝗲𝗲𝗻 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱. Link in comments.

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

Productwarning: https://t.co/VpzjGPrgnp
Casefile: https://t.co/2hftVQYje6

[Stef @Stef_van_Dop]

Thanks for a great event, and all your work over the last 5 years @DIVDnl !

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

Five years of making an impact with DIVD 🎉
Shoutout to our volunteers and partners to make this possible.
#vulnerabilitydisclosure #cybersecurity #foundersday

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@TheRealProcyon ...We are grateful for everything you’ve done for DIVD. We take this situation seriously and are glad to have the opportunity to address it. If you're open to it, we'd welcome further dialogue to ensure this doesn’t happen again. (3/3)

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@TheRealProcyon ...It’s clear that, despite having protocols, they failed to offer you the protection you deserved. We are committed to improving this, ensuring everyone feels secure in their role. Please know that your efforts did not go unnoticed… (2/3)

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@TheRealProcyon We are saddened to hear about the experience that has led to your decision to stop volunteering with DIVD. We appreciate your courage in coming forward, and we sincerely regret that our environment did not feel safe or supportive for you... (1/3)

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

Our team has responsibly disclosed six new #zeroday vulnerabilities in #Enphase IQ Gateway devices. Thanks to the efforts of @Wietsman, Hidde Smit, Max van der Horst and @seccubus, the internet has become a bit safer this week. More info ➡️ https://t.co/Gfr2mghh4x

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@PolitieTHTC Amazing job, congratulations on this success!

[Digital Trust Center @DTC_NL]

Bij een politieoperatie #operationendgame met 14 landen is belangrijke infrastructuur van #ransomware-criminelen platgelegd. Het DTC heeft vandaag honderden bedrijven en organisaties genotificeerd.

Lees verder ⤵️

https://t.co/1CupSuhfJq

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

Operation Endgame: Largest Botnet Takedown, 16 Million Victims to be notified ⚠️
In the upcoming days our CSIRT team will notify more than 16 million victims. Take immediate action if you receive an email. https://t.co/tL1f4Z9OwZ

[🦆 SchizoDuckie 🦆 @SchizoDuckie]

@purpletheism Not all heroes wear capes.
Some wear @DIVDnl hoodies

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

We doen vrijdagavond 22 maart een #WhiskyLeaks #FristiLeaks? op ons HQ in Den Haag. Kom je ook? Aanmelden bij @piiindakaas of @Cvthof https://t.co/15xV2Ty1Ul

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@MetallicaMVP Zeker.

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

⚠️ Two #0days vulnerabilities in Ivanti Connect Secure VPN were actively exploited, allowing attackers unauthenticated remote code execution. DIVD is working on identifying the vulnerable instances and notify the owners of these systems.
https://t.co/6Q3L9xYgdj

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@SIDN Was leuk. Dank voor de gastvrijheid.

[Dutch Institute for Vulnerability Disclosure @DIVDnl]

@ictnieuws Follow our case blog here: https://t.co/JdLuszFHil