#CyberWeekly
A weekly checklist of cyber security things to do, based on what happened this week, in your inbox every Thursday.
For owners of small companies without IT staff, and the IT partners who look after them.
Free. Unsubscribe in one click. Tom Janssens writes it, for Core BV in Zottegem, the team behind Easy Cyber Protection.
Next issue: Thursday 12 November. Read this week's issue first →
Every issue, newest first
#CyberWeekly
Warned Three Weeks Ago. 60,000 Euro Of Food Lost On Monday.
Belgian shop freezers switched to defrost from the internet. The fix had been out for a year.
#CyberWeekly
The Tax Office Went Dark. Your Deadline Did Not.
MyMinfin offline after a cyberattack. The fake "it is back, log in" mail is next.
#CyberWeekly
Belgium Switched Its Websites Off. Is Yours Exposed?
WordPress, Drupal, Magento: all PHP. Ask your hoster today.
#CyberWeekly
Your Fridge Is Not On Your IT List. Hackers Know.
About 700 French supermarkets lost their chilled stock in one night. The way in: a controller nobody updated.
#CyberWeekly
The Gate Was Left Unlocked, Not Broken Down
A mail filter let attackers in for two months. The FBI says 86,644 firewall passwords are already for sale.
#CyberWeekly
Somebody Else Has A Copy Of Your Key
A VPN box was picked before Citrix could cut a new key. Time to count the keys you handed out yourself.
#CyberWeekly
Your Website Left The Stage Door Open
WordPress fixed a hole this week that hackers are already trying. Plus: real invoices, wrong bank account.
#CyberWeekly
Your Firewall Isn't As Locked As You Think
Two firewall makers, two holes that need no password. One is still a warning. The other already delivers ransomware.
#CyberWeekly
You May Be A Manufacturer Now
From 11 September, anyone selling a product with software in it has 24 hours to report a hack of it.
#CyberWeekly
Your Notary Keeps A Copy Of Everything
A Belgian notary practice was named on a leak site on 27 August. No cyber law covers who holds your papers.
#CyberWeekly
Belgian Travel Agency & University Named On Ransomware Sites
Six in sixteen days, then nothing. One has confirmed. Five fall outside every cyber law Belgium has.
#CyberWeekly
WEBA hacked; In Gent or Deinze?
Four stores shut, reopened in two days, then listed on a leak site. Plus the CyFun certificate nobody is allowed to sell you yet.
#CyberWeekly
Hackers Took Credit Card Details From A Print Shop's Supplier
Credit cards gone three suppliers deep, ransomware through a VPN gateway, and the EU certifies the certifiers.
#CyberWeekly
The Key Cupboard
An authentication bypass in N-able N-central, already exploited. Nobody forced a door: they opened the cupboard where all the spare keys hang.
#CyberWeekly
The Forgery
A genuine invoice with a repainted account number, 136 ransomware reports, and two zero-days on the clock.
#CyberWeekly
The Rules of the Road
AI rules land August 2, a national land registry wiped by one login, and pricing that fits your smallest clients.
#CyberWeekly
The Team Car You Never Called
A caller who knows your books, a record patch mountain, and a baseline scan that shows every client their start line.
#CyberWeekly
The Shadow Payroll
Half of AI at work was never approved. The EU AI Act clock hits Aug 2. Meet the employees nobody hired.
#CyberWeekly
Wish You Were Secure
Postcard season: 166 company Wi-Fi passwords stolen in 40 minutes. What to change before you fly.
#CyberWeekly
The Maker, Exposed
Six months in, the maker opens the kitchen. Everything you wanted to know (but were afraid to ask).
#CyberWeekly
On the Map
Europe mapped Belgium's CyFun straight onto NIS2. Plus a free MSP playbook and a perfect-10 Joomla bug to patch today.
#CyberWeekly
Their Own Words
A court made Google own what its AI says. Your backup server, VPN and emergency accounts deserve the same scrutiny.
#CyberWeekly
Looks Legit
Your real booking details, an exploited firewall, a forgotten phone system: this week the familiar was the way in.
#CyberWeekly
Inside Job
Your antivirus, a town's IT supplier, a control panel you forgot you had: this week the trusted layer was the way in.
#CyberWeekly
Open Mail
An Outlook Web Access zero-day turns an opened email into a hijacked mailbox. Mitigations only — no permanent patch yet.
#CyberWeekly
Shortlisted
ECP shortlisted for the Cybersec Europe 2026 Best Innovation award. Plus: a weekly client micro-learning newsletter.
#CyberWeekly
Audit-Ready Arc
ECP ships an end-to-end audit-prep arc. SafePay claims another Belgian SMB. CCB drops a fresh advisory daily.
#CyberWeekly
After the Deadline
NIS2 D-Day passed. The audit deliverable becomes an Excel round-trip, and two Belgian SMEs land on APT73's wall.
#CyberWeekly
Snapshot Your Audit Readiness
The four CyFun tiers are live end-to-end. Audit Readiness now has history, so progress is finally visible.
#CyberWeekly
Your M365 Now Feeds Compliance
Microsoft Graph integration auto-fills your intake. AI drafts policies from your own entity data.
#CyberWeekly
Ransom at the Louvre
RansomHouse hit 3,500 European cultural sites — Louvre, Eiffel Tower, Notre-Dame. Visitor data stolen.
#CyberWeekly
Brussels Got Hacked
ShinyHunters stole 350GB from the European Commission — including the keys to forge their emails
#CyberWeekly
Belgium vs. Phishing
Europol and a Belgian hacker went after phishers from opposite directions this week — and both won
#CyberWeekly
EU Strikes Back
EU sanctions Chinese and Iranian state hackers — while a security firm loses 900,000 records to a single phone call
#CyberWeekly
Devices Wiped Worldwide
Iran-linked Handala claims it wiped 200,000 devices at medtech firm Stryker across 79 countries; Stryker confirmed a disruptive attack
#CyberWeekly
Cyber War Goes Live
Operation Epic Fury sparks global cyber escalation — 60+ hacktivist groups mobilize as Iran's internet drops to 1%
#CyberWeekly
Fraud Is the New Ransomware
WEF Global Cybersecurity Outlook 2026: cyber-enabled fraud overtakes ransomware as top CEO concern — and SMEs are 2.5× more exposed
#CyberWeekly
Olympic Cyberwars: Russia Targets the Winter Games
NoName057(16) launches 120+ DDoS attacks on Milano Cortina — Italy fires up its biggest-ever cyber command center
#CyberWeekly
Friday the 13th: Patch Tuesday Edition
Microsoft fixes 6 actively exploited zero-days — just in time for the unluckiest day of the year
#CyberWeekly
Dangerous Invitations
Russian hackers spoof Brussels university event to steal Microsoft 365 credentials
#CyberWeekly
The Ransomware Reckoning
45% surge in 2025 signals tougher year ahead for Belgian SMEs
#CyberWeekly
Europe Rewrites the Rules
EU proposes revised Cybersecurity Act to secure supply chains and simplify NIS2 compliance
#CyberWeekly
When Hackers Hit Home
Belgian hospital AZ Monica shuts down after ransomware attack
#CyberWeekly
Check-In to Malware
Fake Booking.com emails deploy infostealers across European hotels
#CyberWeekly
New Year, Same Threats
Russia attacks NATO power grid as holiday cyberattacks escalate
#CyberWeekly
Silent Night, Dangerous Night
Hackers hit La Poste before Christmas — and Romania's energy grid is next
#CyberWeekly
Water Under Siege
Romania's water authority hit by ransomware — and hackers gear up for the holidays
#CyberWeekly
Germany Goes NIS2
Europe's largest economy activates its cybersecurity law — and hackers don't take holidays
#CyberWeekly
We Launched
Easy Cyber Protection is here to help Belgian SMEs secure their business