EU Commission Breach Stemmed from Trivy Supply Chain Compromise
NEOSEC enrichment — no mirror of the original source
CERT-EU has released an update following the European Commission's (EC's) March 26, 2026 disclosure of a data breach, adding details about the attack's timing, nature, scope, impact, and attribution. Data amounting to about 340 GB uncompres
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesMore on Commission
Other advisories
- MediumCVE-2026-40134Aufgrund unzureichender Autorisierungsprüfungen in der SAP Incentive and Commission Management-Anwendung konnten authentifizierte Benutzer e...
- MediumCVE-2026-40134Aufgrund unzureichender Autorisierungsprüfungen in der SAP Incentive und Commission Management-Anwendung könnten authentifizierte Benutzer e...
- MediumCVE-2026-40134Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled functi…
- Not ratedosv:MAL-2026-2202Malicious code in @emilgroup/commission-sdk (npm)
- Not ratedosv:MAL-2026-2043Malicious code in @emilgroup/commission-sdk-node (npm)
- MediumCVE-2024-13424Anzia Ni Sales Commission For WooCommerce: fehlende Autorisierung
- MediumCVE-2024-13424Anzia Ni Sales Commission For WooCommerce: fehlende Autorisierung
- Highosv:MAL-2024-6840Malicious code in commission-junction_stats (RubyGems)
Other news entries
- Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposedBreachpwn.watch
- Bithumb internal groupware hacked, ID numbers and ID copies of 844 customers leakedBreachpwn.watch
- US Federal Election Commission shuts down its e-filing system after attempted intrusion a week before the midtermsBreachpwn.watch
- Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on FacebookNewsSecurityWeek
- EU wants Booking.com to check out of its scam problemNewsThe Register — Security
- Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposedBreachpwn.watch
- OpenCode Console breach exposes users' saved OpenAI / Anthropic / Google API keysBreachpwn.watch
- Nikkei breach: stolen credentials expose 1.83M personal-information records from a development cloudBreachpwn.watch
Source: https://cert.europa.eu/
ID