[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwOtmmQi0FrNn2wMQZipNk1Crw2sHG70A5oguw66Iq-4":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"aa025416-6624-4e59-97e6-4dbd83480fa3","Massive DDoS attack disrupts Norway’s government digital services","massive-ddos-attack-disrupts-norway-s-government-digital-services-085653","A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. [...]","A significant distributed denial-of-service (DDoS) attack has impacted Norway's shared government digital infrastructure, affecting public sector services since Monday. While some services have been stabilized, others like ID-porten and eSignering remain partially inaccessible. The Norwegian Digitalization Agency (Digdir) reported no data breaches or system compromises, but this marks the third such attack recently, with speculation pointing towards potential Russian involvement.","Massive DDoS attack disrupts Norway's government digital services.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fmassive-ddos-attack-disrupts-norways-government-digital-services\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F25\u002F0_norway.jpg","2026-08-25T15:52:36+00:00","2026-08-25T16:00:21.056231+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"Vivicta","vendor",{"name":21,"type":22},"ID-porten","product",{"name":24,"type":22},"eSignering",{"name":26,"type":22},"Altinn",{"name":28,"type":22},"Skatteetaten","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":29,"icon":31,"name":32,"slug":33},null,"Threat Intelligence","threat-intelligence",[35,40,45],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":46},{"id":29,"icon":31,"name":32,"slug":33},[],[18,21,24],{"controls":50,"vendors":134},[51,79,108],{"slug":33,"name":52,"problem":53,"products":54},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"slug":80,"name":81,"problem":82,"products":83},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"f5","F5","\u002Fvendor-logos\u002Ff5.png","web-app-and-api-protection","F5 Web App and API Protection","https:\u002F\u002Fwww.f5.com\u002Fsolutions\u002Fweb-app-and-api-protection","Web application firewall, API security, bot management and DDoS mitigation, as a service or self-managed.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","app-and-api-protector","Akamai App & API Protector","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fapp-and-api-protector","Web application firewall, bot and DDoS protection for websites and APIs.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"imperva","Imperva","\u002Fvendor-logos\u002Fimperva.png","imperva-cloud-waf","Imperva Cloud WAF","https:\u002F\u002Fwww.imperva.com\u002Fproducts\u002Fweb-application-firewall-waf\u002F","Cloud web application firewall with DDoS and bot protection.",{"slug":109,"name":110,"problem":111,"products":112},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[113,118,126],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":114,"product_name":115,"url":116,"description":117},"mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":150},"ddos-attack-disrupts-norways-government-digital-services","DDoS Attack Disrupts Norway's Government Digital Services","Norway's shared government digital infrastructure was disrupted by a significant DDoS attack, taking down critical public-facing services like ID-porten and eSignering. The attack highlights the vulnerability of centralized, shared infrastructure where a single attack vector can cascade across multiple government services simultaneously. While no data breach occurred, the repeated nature of these attacks (third incident recently) suggests insufficient mitigation controls have been implemented after prior events. The potential state-sponsored nature of the attack underscores the importance of treating public sector digital services as critical national infrastructure requiring resilient, layered defenses.",[140,141,142,143,144,145,146,147,148,149],"CIS Control 13 – Network Monitoring and Defense","CIS Control 12 – Network Infrastructure Management","NIST SP 800-61 – Computer Security Incident Handling Guide","NIST SP 800-53 SC-5 – Denial of Service Protection","NIST SP 800-53 IR-4 – Incident Handling","NIST CSF RS.MI-1 – Incidents are contained","NIST CSF PR.DS-4 – Adequate capacity to ensure availability","ISO\u002FIEC 27001:2022 – A.8.16 Monitoring Activities","ENISA Good Practice Guide for DDoS Resiliency","EU NIS2 Directive – Article 21 (Security measures for essential entities)",{}]