From NL sources

Polymarket Pays Out $3.9 Million After DebugBear Third-Party Script Compromise

Prediction market platform Polymarket has announced compensation totaling 3.9 million dollars to users affected by a malware incident involving a compromised third-party script. The malicious code was delivered through a performance monitoring script provided by DebugBear, which was injected into Polymarket.com and executed automatically for site visitors. Attackers used the script to target logged-in users, extracting trading positions from 726 wallets and transferring assets worth 2.7 million dollars to an attacker-controlled wallet. An additional 1.2 million dollars is being paid to owners of approximately 5,500 wallets that suffered losses due to the temporary trading suspension. Cybersecurity firm Hudson Rock identified DebugBear as the affected vendor. DebugBear later confirmed that attackers modified DNS records via the domain registrar, preventing email delivery during the incident. The attack was described as targeted at one specific customer website.

NCSC Warns Companies Against Exposing Cooling Systems Directly to the Internet

The Dutch National Cyber Security Centre (NCSC) has issued urgent guidance following a series of attacks on refrigeration systems across Europe, including the Netherlands. Supermarkets and other businesses are advised not to connect cooling installations directly to the internet and to replace default passwords with strong, unique credentials. The NCSC also stresses the importance of applying security updates promptly and monitoring systems for suspicious activity. Affected organisations in several countries have already suffered significant losses, including spoiled food stock and temporary store closures. Manufacturer Danfoss confirmed that compromised installations used factory-default passwords and lacked network segmentation. The agency continues to monitor the situation and investigate the incidents in coordination with European counterparts.