Cyberattack hits European Commission staff mobile systems

The European Commission reports a cyberattack on its central mobile infrastructure that may have exposed staff names and phone numbers.

Swift action by CERT-EU contained the breach within nine hours, linked to critical Ivanti software flaws (CVE-2026-1281 and CVE-2026-1340).

According to the European Commission’s official press release, on 30 January 2026, the organization detected signs of an intrusion within the systems used to manage employee mobile phones and tablets. This type of software, known as Mobile Device Management, is used by large groups to control apps and security settings on many devices at once.

Read more at HackRead