Latest / Tech Talks With Kinsoft
Ivanti Zero-Days Breach the EU Commission & Dutch Govt
Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!
Attackers exploited two critical Ivanti Endpoint Manager Mobile (EPMM) zero-days — CVE-2026-1281 and CVE-2026-1340, both CVSS 9.8 unauthenticated RCE — in a campaign hitting the European Commission, the Dutch government and other European entities. CERT-EU detected the Commission intrusion on 30 January 2026; it may have exposed some staff names and mobile numbers but was contained and the system cleaned within about nine hours, with no mobile devices compromised. We cover why…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.