LinkedIn Carousel - #CyberWeekly Week 8

Olympic Cyberwars: Russia Targets the Winter Games

NoName057(16) launches 120+ DDoS attacks on Milano Cortina — Italy fires up its biggest-ever cyber command center

Platform: Your Compliance GPS Has Arrived

Odido Breach: 6.2M Dutch Records Stolen

BeyondTrust CVSS 9.9 — MSPs Take Note

Easy Cyber Protection

1/5

Olympic cyberwars: Russia targets Milano Cortina with 120+ DDoS attacks

The Winter Olympics got a cyberattack before the first medal was awarded.

Scale of response: Italy launched its first-ever round-the-clock cybersecurity command center in Rome, monitoring all venues and coordinating defenses — the most extensive cyber operation ever mounted for a sporting event
Hotel targeting: NoName057(16) specifically went after hospitality infrastructure where athletes are staying — a reminder that supply chain targets extend far beyond IT systems
No significant disruption: Italy's ACN (National Cybersecurity Agency) successfully thwarted the attacks. Preparation beats panic
Pattern recognition: This group has previously hit France (La Poste, Dec 2025), Poland, Czechia, and Lithuania — any European country supporting Ukraine is a target

Full breakdown from Security Affairs → https://securityaffairs.com/187654/hacktivism/pro-russian-group-noname05716-launched-ddos-attacks-on-milano-cortina-2026-winter-olympics.html

2/5

Platform Spotlight: Your compliance GPS has arrived

Imagine opening the app and knowing exactly what to do next — every single time.

Assess your CyFun level automatically — enter your sector and company size, get your required controls. One click to apply
Follow a guided plan — the Navigator shows your next step with a [Go] button. Complete it, and it advances based on what you actually did
Todo-driven compliance — each todo links to the wiki page where the real work happens. Fill in a policy? Evidence auto-completes. Writing IS compliance

Get started → https://easycyberprotection.com/contact/

3/5

Odido breach: 6.2 million Dutch customers exposed by a phone call

The Netherlands' largest mobile operator just lost 6.2 million customer records — and the attackers didn't exploit a single vulnerability.

Names, home addresses, email addresses, phone numbers
Dates of birth and bank account numbers
ID document details (though not scans of the documents themselves)

BleepingComputer coverage → https://www.bleepingcomputer.com/news/security/odido-data-breach-exposes-personal-info-of-62-million-customers/

4/5

BeyondTrust scores a near-perfect 9.9 — on the CVSS vulnerability scale

When your remote access tool scores 9.9 out of 10 on the vulnerability scale, "critical" doesn't quite capture it.

CVSS 9.9 (v4.0) / 9.8 (v3.1) — about as bad as vulnerabilities get
Unauthenticated WebSocket endpoint — attackers don't need credentials to exploit it
Remote code execution via unsafe Bash arithmetic evaluation in the thin-scc-wrapper script

Technical analysis from Orca Security → https://orca.security/resources/blog/cve-2026-1731-beyondtrust-vulnerability/

5/5

Belgium's NIS2 milestone: 2,410 organizations registered (CCB, March 2025)

Belgium just pulled off the largest cybersecurity compliance operation in its history.

Registration is done — self-assessment is next. The April 18 deadline for CyFun self-assessment submission is now 8 weeks away. Registered doesn't mean compliant
Energy, transport, healthcare, digital infrastructure, government, and manufacturing — these sectors make up the 2,410 critical registrations (CCB, March 2025)
The CCB's CyFun framework is the mandatory assessment tool. Organizations must submit a CyFun self-assessment or equivalent (ISO 27001) to the CCB
MSP opportunity: Thousands of organizations now need help preparing their self-assessment in 8 weeks. That's a lot of compliance work that needs doing

Official CCB announcement → https://ccb.belgium.be/recent-news-tips-and-warning/largest-cyber-security-operation-ever-belgium-2410-organizations

Correction

Correction (2026-09-26): The NIS2 registration item above presented the 2,410 critical-sector registrations as news this week. The CCB announced that figure on 17 March 2025. On this date the item title and its opening paragraph were annotated inline with that date, and the in-scope comparison was put in the past tense. The item also says "over 4,000 registrations across all sectors". Later numbers from the CCB (January 2026, quoted in ICT Magazine) are about 1,500 essential and about 2,500 important entities registered, so about 4,000 in total, an approximation rather than a floor.