https://suspiciousbytes.com/en/incidents/Recent content in Incidents on Suspicious BytesHugoen-USTue, 10 Nov 2026 14:29:01 +0100https://suspiciousbytes.com/en/incidents/2026-11-10-russische-hackers-bespioneren-microsoft-mails-met-navo-en/Tue, 10 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-10-russische-hackers-bespioneren-microsoft-mails-met-navo-en/<p>According to reporting of 10 November 2026, Russian hackers spied on Microsoft email environments and intercepted sensitive information belonging to NATO and the EU. Details on scale, affected organisations and the exact period are limited.</p>https://suspiciousbytes.com/en/incidents/2026-11-09-beschouwing-over-hackers-en-gemalen-in-de-polders/Mon, 09 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-09-beschouwing-over-hackers-en-gemalen-in-de-polders/<p>Omroep Flevoland asks whether hackers could disrupt pumping stations and flood the polders. It is a general discussion of the vulnerability of water management to cyberattacks. No concrete incident is reported.</p>https://suspiciousbytes.com/en/incidents/2026-11-09-britse-jachtteams-speuren-in-bevriende-landen-naar-hackers/Mon, 09 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-09-britse-jachtteams-speuren-in-bevriende-landen-naar-hackers/<p>A British general says British &lsquo;hunt teams&rsquo; search for hackers threatening defence in allied countries. This is a general account of the approach; no concrete incident is reported.</p>https://suspiciousbytes.com/en/incidents/2026-11-09-cyberaanval-op-koelsystemen-bij-700-franse-winkels-frankrijk/Mon, 09 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-09-cyberaanval-op-koelsystemen-bij-700-franse-winkels-frankrijk/<p>France accuses Iran of cyberattacks on freezers and refrigeration systems at around 700 supermarkets and food businesses in late October 2026. French authorities attributed the attacks on 9 November to a cyber unit of the Iranian IRGC. The Paris prosecutor&rsquo;s office opened an investigation and the EU is reportedly preparing sanctions.</p>https://suspiciousbytes.com/en/incidents/2026-11-09-dronepiloten-betrapt-in-no-fly-zone-bij-haven/Mon, 09 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-09-dronepiloten-betrapt-in-no-fly-zone-bij-haven/<p>On Monday 9 November 2026, drone pilots were caught flying in a no-fly zone near the port of Vlissingen. The area is in the region where several drones were previously reported, including near the Borssele nuclear power plant. No further details on the handling are known.</p>https://suspiciousbytes.com/en/incidents/2026-11-09-dronepiloten-gecontroleerd-in-no-fly-zone-kerncentrale-borssele/Mon, 09 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-09-dronepiloten-gecontroleerd-in-no-fly-zone-kerncentrale-borssele/<p>Police caught drone pilots making illegal flights in the no-fly zone around the Borssele nuclear power plant. This concerns the police operation of Monday 9 November 2026, in which pilots were checked with support from specialists of the national expertise and operations unit. Multiple drones had previously been seen in the region, including near the Vlissingen port area.</p>https://suspiciousbytes.com/en/incidents/2026-11-07-nieuw-dronedetectiesysteem-in-rotterdamse-haven/Sat, 07 Nov 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-11-07-nieuw-dronedetectiesysteem-in-rotterdamse-haven/<p>A new detection system has been introduced in the Port of Rotterdam to spot illegal drones more quickly. No specific incident is reported.</p>https://suspiciousbytes.com/en/incidents/2026-10-31-russisch-netwerk-buit-franse-rellen-uit-via-sociale/Sat, 31 Oct 2026 00:00:00 +0100https://suspiciousbytes.com/en/incidents/2026-10-31-russisch-netwerk-buit-franse-rellen-uit-via-sociale/<p>According to Reuters, citing an internal EU report by disinformation specialists, a Russian network tried to exploit the large-scale riots in France in October 2026. Accounts posed as Western media and spread false videos about rapes by migrants and planned attacks, portraying the French government as weak and authoritarian. No evidence was found that Russia provoked the protests. The French Foreign Ministry&rsquo;s own analysis also notes hostile narratives from other accounts. President Macron said on 21 October there was manipulation of information from abroad, but no visible foreign interference behind the protests.</p>https://suspiciousbytes.com/en/incidents/method/Mon, 01 Jan 0001 00:00:00 +0000https://suspiciousbytes.com/en/incidents/method/<h2 id="how-it-works">How it works</h2> <ol> <li><strong>Collect.</strong> A collector (<code>sbcti</code>) reads news feeds and searches: national and regional media, the NCSC and Google News searches on drones, sabotage, reconnaissance, cyberattacks and more. Reports with the right keywords go into a queue. <strong>Nothing is published automatically.</strong></li> <li><strong>Select.</strong> I choose which reports go on the map. Only what I consider relevant to the resilience of vital infrastructure is added.</li> <li><strong>Extract.</strong> A language model (Claude) reads the chosen report and extracts only facts it states: what, where, when, which sector, and whether, for example, there were arrests or a service went down. It also writes a short summary in its own words and says whether the report is about an incident already on the map.</li> <li><strong>Assess.</strong> The program computes the letters and numbers below with fixed rules. The language model does not judge how serious or reliable anything is.</li> </ol> <p>Each incident gets a permanent reference, for example <code>SB-2026-000012</code>.</p>