⚠️ 𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝘄𝗮𝗿𝗻𝗶𝗻𝗴 𝗳𝗼𝗿 𝗦𝗶𝗰𝗼𝗺𝗺𝗡𝗲𝘁 𝗕𝗔𝗦𝗘𝗖 𝗨𝘀𝗲𝗿s
We urge all current and former users of SicommNet BASEC to 𝗶𝗺𝗺𝗲𝗱𝗶𝗮𝘁𝗲𝗹𝘆 𝘀𝘁𝗼𝗽 𝘂𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 and 𝗮𝘀𝘀𝘂𝗺𝗲 𝗮𝗹𝗹 𝗱𝗮𝘁𝗮 𝗵𝗮𝘀 𝗯𝗲𝗲𝗻 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱.
𝗪𝗵𝗮𝘁 𝘆𝗼𝘂 𝘀𝗵𝗼𝘂𝗹𝗱 𝗱𝗼
Stop using the online service
Treat all data in the tool as compromised:
Do not trust any data — it may have been altered by a malicious actor
Assume all data has been leaked
Inform any individuals whose personal identifiable information (PII) is stored in the tool
Report the breach to the appropriate authorities
We found three critical vulnerabilities that allow the bypass of all security measures and gain full access to the system and its data. The vulnerabilities have been present in the platform for years, and despite serious efforts from our side, the vendor has neither acknowledged the existence of nor fixed the vulnerabilities.
Read the full blog: https://csirt.divd.nl/2025/04/14/SicommNet-Basec-product-warning/