Dutch Authorities Warn Digital Resilience Lags as AI Shortens Exploit Timelines to Hours

Kifid Sets New Standard for Gross Negligence in Unauthorized Bank Payments

The Dutch financial complaints institute Kifid has introduced a clearer benchmark for determining gross negligence by bank customers in cases of unauthorized payments. The ruling stems from a dispute involving a Rabobank customer whose phone was stolen during a holiday in Ibiza, leading to 3,500 euros in unauthorized transactions via Apple Pay. Although Kifid confirmed the payments were unauthorized and the customer had filed a police report, it rejected the claim for reimbursement. The institute found the customer grossly negligent for failing to explain how the phone's Face ID and passcode protections were bypassed. Kifid defined gross negligence as acting or omitting to act in an unusually high degree that a normal, reasonable, and careful payer would never do. The decision references an earlier Commission of Appeal ruling that had created inconsistent interpretations of the term. Rabobank is not required to compensate the customer, though an appeal remains possible.

Belgian Government Urges Citizens to Secure Internet-Connected Private Refrigerators

The Belgian government has issued a public advisory calling on citizens to secure their internet-connected smart refrigerators and to carefully consider whether such devices need to be connected to the internet at all. The warning follows recent attacks on supermarket cooling systems across Europe, including in Belgium, where attackers raised temperatures and forced stores to discard large quantities of food. Safeonweb, an initiative of the Belgian Centre for Cybersecurity, stated there are currently no indications that private refrigerators are being targeted. Nevertheless, the agency emphasized the importance of basic IoT security hygiene for any connected device. Recommended measures include replacing default passwords with strong ones, applying updates promptly, isolating smart appliances on a separate Wi-Fi network, and limiting device permissions to only necessary functions and data.

FBI and Partner Agencies Urge Supermarkets to Disconnect Refrigeration Systems from the Internet

The FBI, alongside CISA and multiple U.S. departments, has issued an urgent advisory directing supermarkets and other organizations using refrigeration systems to immediately remove these installations from internet access. The warning follows successful attacks on European supermarket cooling systems that were left publicly reachable, used default passwords, and lacked critical security updates. Attackers altered temperature settings, forcing stores to discard large quantities of perishable food. The agencies highlight risks including shortened equipment lifespan, potential fires, and consumer illness from spoiled products. Recommended actions include isolating control systems behind firewalls, creating dedicated VLANs for OT environments, replacing default credentials with strong unique passwords, applying patches without delay, and monitoring for suspicious activity.