Blog | DIVD CSIRT

Endgame 2.0 Stealer logs 07 July 2025, by DIVD

DIVD CSIRT is performing victim notification on the stealer logs from Operation Endgame 2.0

Full disclosure DIVD-2021-00020 07 May 2025, by DIVD

Full technical details for case DIVD-2021-00020 disclosed

SicommNet BASEC product warning 14 April 2025, by DIVD

There are three serious vulnerabilities in the BASEC tool hosted by SicommNet that allow attackers to bypass all security measures in the tool. These vulnerabilities have been present since at least 14 December 2021.

Wilco van Beijnum and Harm van den Brink found 17 vulnerabilities in Iocharger EV chargers. 16 fixed, 1 unfixed. 09 January 2025, by DIVD

External researcher Wilco van Beijnum and DIVD researcher Harm van der Brink have found 17 vulnerabilities in EV chargers of Iocharger. Limited details released on this website.

Research of Wietse Boonstra and Hidde Smit featured in Follow the Money and at EenVandaag 12 August 2024, by DIVD

Research into vulnerabilities in solar power systems by DIVD researchers Wietse Boonstra and Hidde Smit featured in, Dutch, media Follow the Money and 1Vandaag

DIVD CSIRT performs victim notification for Operation Endgame 30 May 2024, by DIVD

The DIVD CSIRT is performing victim notification for Operation Endgame

DIVD CSIRT Congratulates Project Melissa 25 April 2024, by DIVD

The DIVD CSIRT wants to congratulate all participants of Project Melissa on the recent success in notifying (potential) victims of ransomware

Limited disclosure of 6 vulnerabilities in OSNexus Quantastor 10 July 2023, by DIVD

DIVD researched Wiets Boonstra has foudn 6 vulnerabilities in OSNexus Quantastor. We are disclosing these vulnerabilities and issueing a product warning as a last resort, due to a severly limited cooperation form the vendor.

DIVD’s response regard the involvement of a DIVD volunteer in a major data theft case 24 February 2023, by DIVD

On Thursday, February 23, at around 5:00 PM, news broke of the arrest of three young Dutch hackers in connection with a significant data theft and extortion case. One of them was an active volunteer for DIVD in the past year. We are deeply shocked by the facts that have come to light. The mission of DIVD is to make the internet safer. The allegations against the volunteer are entirely at odds with this mission. It should be clear that we had no knowledge of any criminal activities by the volunteer, nor did we suspect he was involved in such activities.

Fox-IT and DIVD cooperate to warn owners of vulnerable Citrix servers 18 January 2023, by Frank Breedijk

Fox-IT has agreed to share data with DIVD, so DIVD can warn owners of vulnerable Citrix servers