TechPulse Europe — Live Coverage

Cybersecurity

Threat intelligence, data breaches, ransomware campaigns, nation-state attacks and the EU's evolving cyber law framework. Europe's sharpest security coverage — tracked in real time.

284Articles published

17Active incidents tracked

94CVEs covered in 2026

Critical CVE-2026-11482 — Zero-day in Fortinet FortiGate actively exploited across EU financial sector | High Polish energy grid operator reports suspected APT28 reconnaissance activity | Medium NHS Scotland phishing campaign targeting GP practice credentials — NCSC advisory issued | Update ENISA publishes 2026 Threat Landscape report — ransomware up 38% YoY across EU member states | High LockBit 4.0 claims responsibility for Dutch logistics firm breach — 2.4M records allegedly exfiltrated | Critical CVE-2026-11482 — Zero-day in Fortinet FortiGate actively exploited across EU financial sector | High Polish energy grid operator reports suspected APT28 reconnaissance activity | Medium NHS Scotland phishing campaign targeting GP practice credentials — NCSC advisory issued | Update ENISA publishes 2026 Threat Landscape report — ransomware up 38% YoY across EU member states | High LockBit 4.0 claims responsibility for Dutch logistics firm breach — 2.4M records allegedly exfiltrated

All

Ransomware

Nation-State

Data Breaches

Vulnerabilities

Threat Intelligence

Zero-Day

EU Cyber Law

Defence

Sort:

Active Threat Intelligence — Europe

Updated June 9, 2026 · 09:41 CET · Source: ENISA, CERT-EU, national CERTs

CriticalJun 9, 2026

Fortinet FortiGate Zero-Day (CVE-2026-11482) Under Active Exploitation

Remote code execution vulnerability in SSL-VPN component. EU financial sector specifically targeted. Patch available — deploy immediately.

Zero-DayFinancialRCE

HighJun 8, 2026

APT28 Reconnaissance Against Polish Critical Infrastructure Confirmed

Polish CERT confirms spear-phishing and network scanning activity linked to APT28 (Fancy Bear) targeting energy and transport operators.

Nation-StateAPT28Energy

HighJun 7, 2026

LockBit 4.0 Claims 2.4M-Record Breach of Dutch Logistics Operator

Ransomware group claims to have exfiltrated customer data, shipping manifests and employee PII. Victim has 72 hours before alleged publication.

RansomwareLockBitLogistics

HighJun 6, 2026

NHS Scotland GP Credential Phishing Campaign — NCSC Advisory Issued

Sophisticated phishing targeting NHS Scotland primary care login portals. 340+ GP practices warned. Two-factor authentication bypass technique confirmed.

PhishingHealthcareNHS

MediumJun 5, 2026

MuddyWater Campaign Targets German Defence Contractors via LinkedIn

Iran-linked APT using fake recruiter profiles on LinkedIn to deliver malware-laced documents to employees at Tier 2 German defence suppliers.

Nation-StateLinkedInDefence

MediumJun 4, 2026

ENISA 2026 Threat Landscape: Ransomware Up 38% Across EU Member States

Annual ENISA report shows sharp rise in ransomware affecting public services. Healthcare and municipal governments most impacted. SME defences rated "critically insufficient."

ReportENISARansomware

38%

Ransomware increase YoY (EU)

€4.1B

Estimated EU cybercrime losses Q1 2026

Critical CVEs disclosed in 2026

Active APT campaigns in EU

EU Cyber LawIn-DepthJune 4, 2026

Inside Europe's New Cyber Solidarity Act: Who Gets Protected and Who Pays

The Cyber Solidarity Act creates a pan-European shield for critical infrastructure — but the cost-sharing model is already drawing fire from smaller economies who say they're subsidising richer states' defences.

Nico Müller Security Correspondent · 8 min read

Zero-Day

Fortinet FortiGate Zero-Day: How to Patch Before the Next Wave Hits

Nico Müller · Jun 9, 2026 · 5 min

Ransomware

LockBit 4.0 Is Back and More Dangerous Than Its Predecessors — Here's the Evidence

Anna Kovacs · Jun 7, 2026 · 9 min

Nation-State

APT28's Campaign Against Polish Infrastructure: What the Logs Reveal

Nico Müller · Jun 8, 2026 · 7 min

Inside Europe's New Cyber Solidarity Act: Who Gets Protected and Who Pays

A critical infrastructure shield for EU member states — but the cost-sharing model is already drawing fire from smaller economies.

Nico Müller

8 min read

Zero-DayUrgentJun 9

Fortinet FortiGate Zero-Day: Patch Instructions and Interim Mitigations

Step-by-step guide to applying the emergency patch and hardening configurations while a full fix is deployed.

Nico Müller

5 min read

RansomwareJun 7

LockBit 4.0 Is Back and More Dangerous Than Its Predecessors

The group's latest variant evades EDR solutions that stopped LockBit 3.0 — and its affiliate programme is recruiting aggressively across dark web forums.

Anna Kovacs

9 min read

Nation-StateJun 8

APT28's Campaign Against Polish Critical Infrastructure: What the Logs Reveal

Forensic analysis of the TTPs used in the confirmed Polish energy sector reconnaissance — and why other EU operators should check their logs now.

Nico Müller

7 min read

Threat IntelligenceJun 5

ENISA 2026 Threat Landscape: Five Numbers That Should Worry Every CISO in Europe

Ransomware up 38%, supply chain attacks up 52%, mean time to detect still averaging 197 days — the full breakdown of this year's threat picture.

Nico Müller

10 min read

Nation-StateJun 5

MuddyWater's LinkedIn Lure: How Iran Is Targeting Germany's Defence Supply Chain

Fake recruiter profiles, weaponised PDFs and a C2 infrastructure that's been active since January — a full technical breakdown of the campaign.

Tom Barrett

11 min read

Breach Tracker

Recent Significant Incidents — Europe

Updated June 9, 2026 · Sourced from public disclosures and CERT advisories

Organisation	Records	Attack Vector	Disclosed	Status
🇳🇱 Dutch Logistics Operator (unnamed) Transport & Logistics	2.4M	Ransomware (LockBit 4.0)	Jun 7, 2026	Ongoing
🇩🇪 Stadtwerke München (SWM) Energy / Municipal	890K	Supply Chain	May 28, 2026	Contained
🇫🇷 Caisse Nationale d'Assurance Healthcare / Insurance	4.1M	Credential Stuffing	May 19, 2026	Contained
🇵🇱 PKN Orlen (partial) Energy	Unknown	APT28 Recon	Jun 8, 2026	Ongoing
🇬🇧 NHS Scotland GP Network Healthcare	340+ practices	Phishing	Jun 6, 2026	Investigating

NIS2 Compliance Deadline Passed — Why 11 EU States Are Still Non-Compliant

Nico Müller · May 27, 2026 · 8 min read

AI & Security

How Threat Actors Are Using LLMs to Write Better Phishing Emails at Scale

Anna Kovacs · May 24, 2026 · 7 min read

Infrastructure

The BGP Hijack That Redirected German Bank Traffic for 94 Minutes — A Post-Mortem

Tom Barrett · May 20, 2026 · 12 min read

Defence

Passkeys Are Now Enterprise-Ready: The Migration Guide for IT Teams

Nico Müller · May 16, 2026 · 9 min read

Threat Intelligence

OSINT Techniques State Actors Use to Map Your Organisation — and How to Reduce Exposure

Anna Kovacs · May 12, 2026 · 10 min read

CVE-2026-11482CVSS 9.8

Fortinet FortiGate SSL-VPN RCE — patch immediately

Vendor: Fortinet · Patch: FGT 7.6.3

CVE-2026-10991CVSS 9.1

Microsoft SharePoint Server auth bypass + RCE chain

Vendor: Microsoft · Patch: June 2026 Cumulative

CVE-2026-09874CVSS 8.6

VMware vCenter privilege escalation via SOAP endpoint

Vendor: Broadcom · Patch: vCenter 8.0 U4a

CVE-2026-09201CVSS 8.2

Cisco IOS XE Web UI unauthenticated access

Vendor: Cisco · Patch: IOS XE 17.15.1

‹

…

›

Cyber­security

Fortinet FortiGate Zero-Day (CVE-2026-11482) Under Active Exploitation

APT28 Reconnaissance Against Polish Critical Infrastructure Confirmed

LockBit 4.0 Claims 2.4M-Record Breach of Dutch Logistics Operator

NHS Scotland GP Credential Phishing Campaign — NCSC Advisory Issued

MuddyWater Campaign Targets German Defence Contractors via LinkedIn

ENISA 2026 Threat Landscape: Ransomware Up 38% Across EU Member States

Inside Europe's New Cyber Solidarity Act: Who Gets Protected and Who Pays

Fortinet FortiGate Zero-Day: How to Patch Before the Next Wave Hits

LockBit 4.0 Is Back and More Dangerous Than Its Predecessors — Here's the Evidence

APT28's Campaign Against Polish Infrastructure: What the Logs Reveal

Inside Europe's New Cyber Solidarity Act: Who Gets Protected and Who Pays

Fortinet FortiGate Zero-Day: Patch Instructions and Interim Mitigations

LockBit 4.0 Is Back and More Dangerous Than Its Predecessors

APT28's Campaign Against Polish Critical Infrastructure: What the Logs Reveal

ENISA 2026 Threat Landscape: Five Numbers That Should Worry Every CISO in Europe

MuddyWater's LinkedIn Lure: How Iran Is Targeting Germany's Defence Supply Chain

NIS2 Compliance Deadline Passed — Why 11 EU States Are Still Non-Compliant

How Threat Actors Are Using LLMs to Write Better Phishing Emails at Scale

The BGP Hijack That Redirected German Bank Traffic for 94 Minutes — A Post-Mortem

Passkeys Are Now Enterprise-Ready: The Migration Guide for IT Teams

OSINT Techniques State Actors Use to Map Your Organisation — and How to Reduce Exposure

Cybersecurity