[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC4t3mYRD7OfOVMFgZU7r7oJNif21Jf2x8Bhh-v1iQWI":3},{"article":4,"iocs":56,"watch_terms":60,"solutions":61,"lesson":149},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"da39d6b0-20b2-4fc1-948c-ee73b4aecab0","Police suspects Dutch hackers were involved in Odido breach","police-suspects-dutch-hackers-were-involved-in-odido-breach-d5e2d6","The Dutch National Police (Politie) says it has found \"strong indications\" that Dutch hackers have been involved in a February breach at the telecommunications provider Odido. [...]","Dutch police have found strong indications that Dutch hackers were involved in the February breach at telecommunications provider Odido. The attackers allegedly used a vishing attack, posing as an IT employee, to trick the company into granting them access, leading to a data theft affecting 6.2 million customers. The ShinyHunters gang claimed responsibility, known for similar attacks targeting SSO accounts and data theft from connected SaaS applications.","Dutch police suspect Dutch hackers involved in Odido breach via phishing and vishing.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fpolice-suspects-dutch-hackers-were-involved-in-odido-breach\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F03\u002F27\u002FDutch_Police.jpg","2026-07-10T16:37:01+00:00","2026-07-10T18:00:25.368004+00:00",8,[17,20,23,26,28,30],{"name":18,"type":19},"ShinyHunters","threat_actor",{"name":21,"type":22},"Odido","vendor",{"name":24,"type":25},"Microsoft 365","product",{"name":27,"type":25},"Google Workspace",{"name":29,"type":25},"Salesforce",{"name":31,"type":32},"SSO","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":33,"icon":35,"name":36,"slug":37},null,"Breaches","breaches",[39,44,46,51],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":45},{"id":33,"icon":35,"name":36,"slug":37},{"category":47},{"id":48,"icon":35,"name":49,"slug":50},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":52},{"id":53,"icon":35,"name":54,"slug":55},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[57],{"type":58,"value":18,"context":59},"malware","Extortion gang claiming responsibility for the Odido breach.",[21,24,27],{"controls":62,"vendors":148},[63,92,121],{"slug":64,"name":65,"problem":66,"products":67},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":93,"name":94,"problem":95,"products":96},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[97,105,113],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":122,"name":123,"problem":124,"products":125},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[126,133,141],{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":122,"product_name":130,"url":131,"description":132},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":142,"product_name":145,"url":146,"description":147},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[],{"slug":150,"title":151,"body":152,"framework_refs":153,"framework_notes":170},"vishing-attack-tricks-odido-into-granting-access-exposing-62m-customers","Vishing Attack Tricks Odido Into Granting Access, Exposing 6.2M Customers","The Odido breach demonstrates how social engineering — specifically vishing (voice phishing) — can completely bypass technical security controls by exploiting human trust. Attackers impersonated an IT employee to manipulate staff into granting unauthorized access, after which they pivoted to steal data from connected SaaS applications via compromised SSO accounts. This incident highlights that even well-resourced organizations remain vulnerable when employees lack robust verification procedures for identity requests made over the phone. The scale of the breach — 6.2 million customers — underscores the catastrophic downstream impact of a single successful social engineering interaction. ShinyHunters' repeated use of this technique signals a proven, repeatable attack pattern that organizations must actively train against.",[154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169],"CIS Control 4 – Controlled Use of Administrative Privileges","CIS Control 6 – Access Control Management","CIS Control 14 – Security Awareness and Skills Training","CIS Control 16 – Application Software Security","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 AC-17 – Remote Access","NIST SP 800-53 IA-4 – Identifier Management","NIST SP 800-53 SI-10 – Information Input Validation","NIST SP 800-61 – Incident Response Guide","NIST CSF PR.AC-1 – Identities and Credentials Management","GDPR Article 5(1)(f) – Integrity and Confidentiality","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach","ITIL Service Operation – Access Management","MITRE ATT&CK T1566.004 – Phishing: Vishing","MITRE ATT&CK T1078 – Valid Accounts",{}]