Know What's Happening in Cybersecurity

European Commission Discloses Breach that Exposed Staff Data

The European Commission disclosed a cyber‑attack on its mobile‑device‑management platform on 30 January, where attackers accessed staff names and phone numbers but did not compromise the devices themselves. The breach was contained within nine hours after detection and traced to two zero‑day flaws (CVE‑2026‑1281, CVE‑2026‑1340) in Ivanti Endpoint Manager Mobile, the same software exploited in recent Dutch agency hacks. The incident coincides with the Commission’s new cybersecurity legislation aimed at bolstering defenses against state‑backed threats. It also raised concerns about cross‑border data sharing protocols within EU agencies.